# CVEs published 2017-02-03

44 CVEs were published on February 3, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2015-4049](https://cve.now/CVE-2015-4049.md): Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated (no CVSS)
- [CVE-2016-10165](https://cve.now/CVE-2016-10165.md): The Type\_MLU\_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial (no CVSS)
- [CVE-2016-6500](https://cve.now/CVE-2016-6500.md): Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls const (no CVSS)
- [CVE-2016-3183](https://cve.now/CVE-2016-3183.md): The sycc422\_t\_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds re (no CVSS)
- [CVE-2016-4796](https://cve.now/CVE-2016-4796.md): Heap-based buffer overflow in the color\_cmyk\_to\_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2016-4797](https://cve.now/CVE-2016-4797.md): Divide-by-zero vulnerability in the opj\_tcd\_init\_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2016-6188](https://cve.now/CVE-2016-6188.md): Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to upload (no CVSS)
- [CVE-2016-2317](https://cve.now/CVE-2016-2317.md): Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, relat (no CVSS)
- [CVE-2016-2318](https://cve.now/CVE-2016-2318.md): GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (no CVSS)
- [CVE-2016-4352](https://cve.now/CVE-2016-4352.md): Integer overflow in the demuxer function in libmpdemux/demux\_gif.c in Mplayer allows remote attackers to cause a denial of service (crash) v (no CVSS)
- [CVE-2016-4570](https://cve.now/CVE-2016-4570.md): The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack co (no CVSS)
- [CVE-2016-4571](https://cve.now/CVE-2016-4571.md): The mxml\_write\_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (sta (no CVSS)
- [CVE-2016-5115](https://cve.now/CVE-2016-5115.md): The avcodec\_decode\_audio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of (no CVSS)
- [CVE-2016-5241](https://cve.now/CVE-2016-5241.md): magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application c (no CVSS)
- [CVE-2016-6163](https://cve.now/CVE-2016-6163.md): The rsvg\_pattern\_fix\_fallback function in rsvg-paint\_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-o (no CVSS)
- [CVE-2016-8568](https://cve.now/CVE-2016-8568.md): The git\_commit\_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) (no CVSS)
- [CVE-2016-8569](https://cve.now/CVE-2016-8569.md): The git\_oid\_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereferenc (no CVSS)
- [CVE-2016-9082](https://cve.now/CVE-2016-9082.md): Integer overflow in the write\_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference (no CVSS)
- [CVE-2016-9085](https://cve.now/CVE-2016-9085.md): Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors. (no CVSS)
- [CVE-2016-9108](https://cve.now/CVE-2016-9108.md): Integer overflow in the js\_regcomp function in regexp.c in Artifex Software, Inc. (no CVSS)
- [CVE-2016-9642](https://cve.now/CVE-2016-9642.md): JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file. (no CVSS)
- [CVE-2016-0890](https://cve.now/CVE-2016-0890.md): EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1 is affected by a sensitive informatio (no CVSS, EMC PowerPath Virtual (Management) Appliance EMC PowerPath…)
- [CVE-2016-0919](https://cve.now/CVE-2016-0919.md): EMC RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Detection version 5.1.2 has a cross site scri (no CVSS, RSA Web Threat Detection RSA Web Threat Detection)
- [CVE-2016-6648](https://cve.now/CVE-2016-6648.md): EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information (no CVSS, EMC RecoverPoint and EMC RecoverPoint for Virtual Machines…)
- [CVE-2016-6649](https://cve.now/CVE-2016-6649.md): EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command inje (no CVSS, EMC RecoverPoint and EMC RecoverPoint for Virtual Machines…)
- [CVE-2016-8211](https://cve.now/CVE-2016-8211.md): EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EM (no CVSS, EMC Data Protection Advisor EMC Data Protection Advisor 6.1…)
- [CVE-2016-8212](https://cve.now/CVE-2016-8212.md): An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. (no CVSS, RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to)
- [CVE-2016-8216](https://cve.now/CVE-2016-8216.md): EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) (no CVSS, EMC Data Domain DD OS EMC Data Domain OS (DD OS) 5.4 all ve…)
- [CVE-2016-8217](https://cve.now/CVE-2016-8217.md): EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability. (no CVSS, RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to)
- [CVE-2016-9871](https://cve.now/CVE-2016-9871.md): EMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x is affected by a (no CVSS, EMC Isilon OneFS EMC Isilon OneFS 7.2.1.0 7.2.1.3, EMC Isil…)
- [CVE-2016-9872](https://cve.now/CVE-2016-9872.md): EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has Reflected Cross-Site Scripting Vulnerabilities that could potentially be (no CVSS, EMC Documentum D2 EMC Documentum D2)
- [CVE-2016-9873](https://cve.now/CVE-2016-9873.md): EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by mal (no CVSS, EMC Documentum D2 EMC Documentum D2)
- [CVE-2017-2766](https://cve.now/CVE-2017-2766.md): EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum (no CVSS, EMC Documentum eRoom EMC Documentum eRoom)
- [CVE-2017-2767](https://cve.now/CVE-2017-2767.md): EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4. (no CVSS, EMC Network Configuration Manager EMC Network Configuration…)
- [CVE-2017-2768](https://cve.now/CVE-2017-2768.md): EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4. (no CVSS, EMC Network Configuration Manager EMC Network Configuration…)
- [CVE-2017-3806](https://cve.now/CVE-2017-3806.md): A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appl (no CVSS, Cisco Firepower 4100 Series Next-Generation Firewall and Ci…)
- [CVE-2017-3809](https://cve.now/CVE-2017-3809.md): A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attack (no CVSS, Cisco Firepower Management Center (FMC) 6.1.0)
- [CVE-2017-3810](https://cve.now/CVE-2017-3810.md): A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redir (no CVSS, Cisco Prime Service Catalog 10.0\_R2\_tanggula)
- [CVE-2017-3812](https://cve.now/CVE-2017-3812.md): A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches co (no CVSS, Cisco Industrial Ethernet 2000 Switches 15.2(5.4.32i)E2)
- [CVE-2017-3814](https://cve.now/CVE-2017-3814.md): A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's abi (no CVSS, Cisco Firepower System Software 5.x 6.x)
- [CVE-2017-3818](https://cve.now/CVE-2017-3818.md): A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (E (no CVSS, Cisco AsyncOS 9.7.1-066)
- [CVE-2017-3820](https://cve.now/CVE-2017-3820.md): A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco I (no CVSS, Cisco IOS XE 15.x)
- [CVE-2017-3822](https://cve.now/CVE-2017-3822.md): A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthent (no CVSS, Cisco Firepower Threat Defense Software versions 6.1.x)
- [CVE-2017-3824](https://cve.now/CVE-2017-3824.md): A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attac (no CVSS, Cisco IOS XE 15.x)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.