# CVEs published 2017-02-10

9 CVEs were published on February 10, 2017: 0 critical, 3 high. Days are UTC.

- [CVE-2016-8709](https://cve.now/CVE-2016-8709.md): A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. (CVSS 8.8, Nitro Pro)
- [CVE-2016-8711](https://cve.now/CVE-2016-8711.md): A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. (CVSS 8.8, Nitro Pro)
- [CVE-2016-8713](https://cve.now/CVE-2016-8713.md): A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. (CVSS 8.8, Nitro Pro)
- [CVE-2016-10215](https://cve.now/CVE-2016-10215.md): An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. (no CVSS)
- [CVE-2016-10216](https://cve.now/CVE-2016-10216.md): An issue was discovered in IT ITems DataBase (ITDB) through 1.23. (no CVSS)
- [CVE-2017-5942](https://cve.now/CVE-2017-5942.md): An issue was discovered in the WP Mail plugin before 1.2 for WordPress. (no CVSS)
- [CVE-2017-5945](https://cve.now/CVE-2017-5945.md): An issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle. (no CVSS)
- [CVE-2017-5953](https://cve.now/CVE-2017-5953.md): vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overf (no CVSS)
- [CVE-2017-5954](https://cve.now/CVE-2017-5954.md): An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. (no CVSS, serialize-to-js)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-02-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.