CVEs published February 8, 2017
86 CVEs were published on February 8, 2017: 0 critical, 0 high.
- Published
- 86
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 86
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Google Android
- 54
- IBM Cloud Orchestrator
- 4
- IBM Connections
- 4
- IBM Rational DOORS Next Generation
- 3
- IBM Rational Collaborative Lifecycle Management
- 2
- EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2…
- 1
- Fortinet FortiGate
- 1
- IBM Access Manager
- 1
- IBM BigFix Platform
- 1
- IBM DashDB Local
- 1
Medium, low and unrated 86
- CVE-2015-1976IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the toIBM Directory Server
- CVE-2015-7418IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwrIBM WebSphere DataPower XC10 Appliance
- CVE-2015-7493IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes thaIBM InfoSphere Information Server
- CVE-2015-7494A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API.IBM Cloud Orchestrator
- CVE-2016-0202A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud OrcIBM Cloud Orchestrator
- CVE-2016-0203A vulnerability has been identified in the IBM Cloud Orchestrator task API.IBM Cloud Orchestrator
- CVE-2016-0206IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of time by using a speIBM Cloud Orchestrator
- CVE-2016-0210IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information.IBM Sterling B2B Integrator
- CVE-2016-0214IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files.IBM BigFix Platform
- CVE-2016-0305IBM Connections is vulnerable to cross-site scripting, caused by improper validation of user-supplied input.IBM Connections
- CVE-2016-0307IBM Connections 5.5 and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned responses.IBM Connections
- CVE-2016-0308IBM Connections 5.5 and earlier is vulnerable to possible link manipulation attack that could result in the display of inappropriate backgroIBM Connections
- CVE-2016-0310IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain.IBM Connections
- CVE-2016-5900IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by theIBM Tealeaf Customer Experience
- CVE-2016-5902IBM Maximo Asset Management is vulnerable to cross-site scripting.IBM Maximo Asset Management 6.2, 7.1, 7.5, 7.5.0.0, 7.5.0.1…
- CVE-2016-5918IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the passworIBM Tivoli Storage Manager HSM for Windows
- CVE-2016-5934IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system.IBM Tivoli Storage Manager FastBack
- CVE-2016-8954IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database.IBM DashDB Local
- CVE-2016-9005IBM System Storage TS3100-TS3200 Tape Library could allow an unauthenticated user with access to the company network, to change a user's pasIBM System Storage
- CVE-2016-9686The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes.Puppet Enterprise
- CVE-2015-5013The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated usersIBM Access Manager
- CVE-2016-2866An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user.IBM Rational Collaborative Lifecycle Management
- CVE-2016-6032IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2016-9748IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attIBM Rational DOORS Next Generation
- CVE-2017-1127IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.IBM Rational DOORS Next Generation
- CVE-2017-1128IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.IBM Rational DOORS Next Generation
- CVE-2017-2765EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0 is affected by an authentication bypass vulnerabilEMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2…
- CVE-2016-0270IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce generation,
- CVE-2016-10212Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof da
- CVE-2016-10213A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote atta
- CVE-2016-8492The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the devicFortinet FortiGate
- CVE-2017-5933Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly gen
- CVE-2016-8414An information disclosure vulnerability in the Qualcomm Secure Execution Environment Communicator could enable a local malicious applicationGoogle Android
- CVE-2016-8418A remote code execution vulnerability in the Qualcomm crypto driver could enable a remote attacker to execute arbitrary code within the contGoogle Android
- CVE-2016-8419An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8420An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8421An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8476An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8480An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious applGoogle Android
- CVE-2016-8481An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0405A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption dGoogle Android
- CVE-2017-0406A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriGoogle Android
- CVE-2017-0407A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriGoogle Android
- CVE-2017-0408A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code in the conGoogle Android
- CVE-2017-0409A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code inGoogle Android
- CVE-2017-0410An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within thGoogle Android
- CVE-2017-0411An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within thGoogle Android
- CVE-2017-0412An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within thGoogle Android
- CVE-2017-0413An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections Google Android
- CVE-2017-0414An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections Google Android
- CVE-2017-0415An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0416An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0417An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0418An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0419An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0420An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that Google Android
- CVE-2017-0421An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protectiGoogle Android
- CVE-2017-0422A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hGoogle Android
- CVE-2017-0423An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device.Google Android
- CVE-2017-0424An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outsideGoogle Android
- CVE-2017-0425An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission lGoogle Android
- CVE-2017-0426An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its permissioGoogle Android
- CVE-2017-0427An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code withiGoogle Android
- CVE-2017-0428An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2017-0429An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2017-0430An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0432An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tGoogle Android
- CVE-2017-0433An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary Google Android
- CVE-2017-0434An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary Google Android
- CVE-2017-0435An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0436An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0437An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0438An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0439An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0440An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0441An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0442An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0443An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0444An elevation of privilege vulnerability in the Realtek sound driver could enable a local malicious application to execute arbitrary code witGoogle Android
- CVE-2017-0445An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2017-0446An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2017-0447An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2017-0448An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its Google Android
- CVE-2017-0449An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0450An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0451An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of itGoogle Android