# CVEs published 2017-02-08

86 CVEs were published on February 8, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1976](https://cve.now/CVE-2015-1976.md): IBM Security Directory Server could allow an authenticated user to execute commands into the web administration tool that would cause the to (no CVSS, IBM Directory Server)
- [CVE-2015-7418](https://cve.now/CVE-2015-7418.md): IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwr (no CVSS, IBM WebSphere DataPower XC10 Appliance)
- [CVE-2015-7493](https://cve.now/CVE-2015-7493.md): IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes tha (no CVSS, IBM InfoSphere Information Server)
- [CVE-2015-7494](https://cve.now/CVE-2015-7494.md): A vulnerability has been identified in IBM Cloud Orchestrator services/\[action\]/launch API. (no CVSS, IBM Cloud Orchestrator)
- [CVE-2016-0202](https://cve.now/CVE-2016-0202.md): A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orc (no CVSS, IBM Cloud Orchestrator)
- [CVE-2016-0203](https://cve.now/CVE-2016-0203.md): A vulnerability has been identified in the IBM Cloud Orchestrator task API. (no CVSS, IBM Cloud Orchestrator)
- [CVE-2016-0206](https://cve.now/CVE-2016-0206.md): IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of time by using a spe (no CVSS, IBM Cloud Orchestrator)
- [CVE-2016-0210](https://cve.now/CVE-2016-0210.md): IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. (no CVSS, IBM Sterling B2B Integrator)
- [CVE-2016-0214](https://cve.now/CVE-2016-0214.md): IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. (no CVSS, IBM BigFix Platform)
- [CVE-2016-0305](https://cve.now/CVE-2016-0305.md): IBM Connections is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. (no CVSS, IBM Connections)
- [CVE-2016-0307](https://cve.now/CVE-2016-0307.md): IBM Connections 5.5 and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned responses. (no CVSS, IBM Connections)
- [CVE-2016-0308](https://cve.now/CVE-2016-0308.md): IBM Connections 5.5 and earlier is vulnerable to possible link manipulation attack that could result in the display of inappropriate backgro (no CVSS, IBM Connections)
- [CVE-2016-0310](https://cve.now/CVE-2016-0310.md): IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could cause navigation to the attacker's domain. (no CVSS, IBM Connections)
- [CVE-2016-5900](https://cve.now/CVE-2016-5900.md): IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by the (no CVSS, IBM Tealeaf Customer Experience)
- [CVE-2016-5902](https://cve.now/CVE-2016-5902.md): IBM Maximo Asset Management is vulnerable to cross-site scripting. (no CVSS, IBM Maximo Asset Management 6.2, 7.1, 7.5, 7.5.0.0, 7.5.0.1…)
- [CVE-2016-5918](https://cve.now/CVE-2016-5918.md): IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the passwor (no CVSS, IBM Tivoli Storage Manager HSM for Windows)
- [CVE-2016-5934](https://cve.now/CVE-2016-5934.md): IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. (no CVSS, IBM Tivoli Storage Manager FastBack)
- [CVE-2016-8954](https://cve.now/CVE-2016-8954.md): IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container or database. (no CVSS, IBM DashDB Local)
- [CVE-2016-9005](https://cve.now/CVE-2016-9005.md): IBM System Storage TS3100-TS3200 Tape Library could allow an unauthenticated user with access to the company network, to change a user's pas (no CVSS, IBM System Storage)
- [CVE-2016-9686](https://cve.now/CVE-2016-9686.md): The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. (no CVSS, Puppet Enterprise)
- [CVE-2015-5013](https://cve.now/CVE-2015-5013.md): The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users (no CVSS, IBM Access Manager)
- [CVE-2016-2866](https://cve.now/CVE-2016-2866.md): An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user. (no CVSS, IBM Rational Collaborative Lifecycle Management)
- [CVE-2016-6032](https://cve.now/CVE-2016-6032.md): IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational Collaborative Lifecycle Management)
- [CVE-2016-9748](https://cve.now/CVE-2016-9748.md): IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further att (no CVSS, IBM Rational DOORS Next Generation)
- [CVE-2017-1127](https://cve.now/CVE-2017-1127.md): IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational DOORS Next Generation)
- [CVE-2017-1128](https://cve.now/CVE-2017-1128.md): IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational DOORS Next Generation)
- [CVE-2017-2765](https://cve.now/CVE-2017-2765.md): EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0 is affected by an authentication bypass vulnerabil (no CVSS, EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2…)
- [CVE-2016-0270](https://cve.now/CVE-2016-0270.md): IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce generation, (no CVSS)
- [CVE-2016-10212](https://cve.now/CVE-2016-10212.md): Radware devices use the same value for the first two GCM nonces, which allows remote attackers to obtain the authentication key and spoof da (no CVSS)
- [CVE-2016-10213](https://cve.now/CVE-2016-10213.md): A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which makes it easier for remote atta (no CVSS)
- [CVE-2016-8492](https://cve.now/CVE-2016-8492.md): The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the devic (no CVSS, Fortinet FortiGate)
- [CVE-2017-5933](https://cve.now/CVE-2017-5933.md): Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly gen (no CVSS)
- [CVE-2016-8414](https://cve.now/CVE-2016-8414.md): An information disclosure vulnerability in the Qualcomm Secure Execution Environment Communicator could enable a local malicious application (no CVSS, Google Android)
- [CVE-2016-8418](https://cve.now/CVE-2016-8418.md): A remote code execution vulnerability in the Qualcomm crypto driver could enable a remote attacker to execute arbitrary code within the cont (no CVSS, Google Android)
- [CVE-2016-8419](https://cve.now/CVE-2016-8419.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2016-8420](https://cve.now/CVE-2016-8420.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2016-8421](https://cve.now/CVE-2016-8421.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2016-8476](https://cve.now/CVE-2016-8476.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2016-8480](https://cve.now/CVE-2016-8480.md): An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious appl (no CVSS, Google Android)
- [CVE-2016-8481](https://cve.now/CVE-2016-8481.md): An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0405](https://cve.now/CVE-2017-0405.md): A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption d (no CVSS, Google Android)
- [CVE-2017-0406](https://cve.now/CVE-2017-0406.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duri (no CVSS, Google Android)
- [CVE-2017-0407](https://cve.now/CVE-2017-0407.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duri (no CVSS, Google Android)
- [CVE-2017-0408](https://cve.now/CVE-2017-0408.md): A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code in the con (no CVSS, Google Android)
- [CVE-2017-0409](https://cve.now/CVE-2017-0409.md): A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code in (no CVSS, Google Android)
- [CVE-2017-0410](https://cve.now/CVE-2017-0410.md): An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within th (no CVSS, Google Android)
- [CVE-2017-0411](https://cve.now/CVE-2017-0411.md): An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within th (no CVSS, Google Android)
- [CVE-2017-0412](https://cve.now/CVE-2017-0412.md): An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within th (no CVSS, Google Android)
- [CVE-2017-0413](https://cve.now/CVE-2017-0413.md): An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections (no CVSS, Google Android)
- [CVE-2017-0414](https://cve.now/CVE-2017-0414.md): An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections (no CVSS, Google Android)
- [CVE-2017-0415](https://cve.now/CVE-2017-0415.md): An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the conte (no CVSS, Google Android)
- [CVE-2017-0416](https://cve.now/CVE-2017-0416.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conte (no CVSS, Google Android)
- [CVE-2017-0417](https://cve.now/CVE-2017-0417.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conte (no CVSS, Google Android)
- [CVE-2017-0418](https://cve.now/CVE-2017-0418.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conte (no CVSS, Google Android)
- [CVE-2017-0419](https://cve.now/CVE-2017-0419.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conte (no CVSS, Google Android)
- [CVE-2017-0420](https://cve.now/CVE-2017-0420.md): An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that (no CVSS, Google Android)
- [CVE-2017-0421](https://cve.now/CVE-2017-0421.md): An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protecti (no CVSS, Google Android)
- [CVE-2017-0422](https://cve.now/CVE-2017-0422.md): A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device h (no CVSS, Google Android)
- [CVE-2017-0423](https://cve.now/CVE-2017-0423.md): An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. (no CVSS, Google Android)
- [CVE-2017-0424](https://cve.now/CVE-2017-0424.md): An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside (no CVSS, Google Android)
- [CVE-2017-0425](https://cve.now/CVE-2017-0425.md): An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission l (no CVSS, Google Android)
- [CVE-2017-0426](https://cve.now/CVE-2017-0426.md): An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its permissio (no CVSS, Google Android)
- [CVE-2017-0427](https://cve.now/CVE-2017-0427.md): An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code withi (no CVSS, Google Android)
- [CVE-2017-0428](https://cve.now/CVE-2017-0428.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android)
- [CVE-2017-0429](https://cve.now/CVE-2017-0429.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android)
- [CVE-2017-0430](https://cve.now/CVE-2017-0430.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0432](https://cve.now/CVE-2017-0432.md): An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within t (no CVSS, Google Android)
- [CVE-2017-0433](https://cve.now/CVE-2017-0433.md): An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary (no CVSS, Google Android)
- [CVE-2017-0434](https://cve.now/CVE-2017-0434.md): An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary (no CVSS, Google Android)
- [CVE-2017-0435](https://cve.now/CVE-2017-0435.md): An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0436](https://cve.now/CVE-2017-0436.md): An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0437](https://cve.now/CVE-2017-0437.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0438](https://cve.now/CVE-2017-0438.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0439](https://cve.now/CVE-2017-0439.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0440](https://cve.now/CVE-2017-0440.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0441](https://cve.now/CVE-2017-0441.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0442](https://cve.now/CVE-2017-0442.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0443](https://cve.now/CVE-2017-0443.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0444](https://cve.now/CVE-2017-0444.md): An elevation of privilege vulnerability in the Realtek sound driver could enable a local malicious application to execute arbitrary code wit (no CVSS, Google Android)
- [CVE-2017-0445](https://cve.now/CVE-2017-0445.md): An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android)
- [CVE-2017-0446](https://cve.now/CVE-2017-0446.md): An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android)
- [CVE-2017-0447](https://cve.now/CVE-2017-0447.md): An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android)
- [CVE-2017-0448](https://cve.now/CVE-2017-0448.md): An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its (no CVSS, Google Android)
- [CVE-2017-0449](https://cve.now/CVE-2017-0449.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0450](https://cve.now/CVE-2017-0450.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conte (no CVSS, Google Android)
- [CVE-2017-0451](https://cve.now/CVE-2017-0451.md): An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-02-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.