# CVEs published 2017-02-13

124 CVEs were published on February 13, 2017: 3 critical, 3 high. Days are UTC.

- [CVE-2016-8355](https://cve.now/CVE-2016-8355.md): An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. (no CVSS, Smiths-Medical CADD-Solis Medication Safety Software through)
- [CVE-2016-8358](https://cve.now/CVE-2016-8358.md): An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. (no CVSS, Smiths-Medical CADD-Solis Medication Safety Software through)
- [CVE-2016-8375](https://cve.now/CVE-2016-8375.md): An issue was discovered in Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit, Version 9.5 and prior versions, and Versi (no CVSS, BD Alaris 8015 through 9.7 and)
- [CVE-2016-9355](https://cve.now/CVE-2016-9355.md): An issue was discovered in Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit, Version 9.5 and prior versions, and Versi (no CVSS, BD Alaris 8015 Insufficiently Protected Credentials Vulnera…)
- [CVE-2017-1121](https://cve.now/CVE-2017-1121.md): IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting. (no CVSS, IBM WebSphere Application Server)
- [CVE-2017-5149](https://cve.now/CVE-2017-5149.md): An issue was discovered in St. (no CVSS, St. Jude Merlin@home Transmitter before)
- [CVE-2016-10224](https://cve.now/CVE-2016-10224.md): An issue was discovered in Sauter NovaWeb web HMI. (no CVSS, Sauter NovaWeb Web HMI)
- [CVE-2016-2274](https://cve.now/CVE-2016-2274.md): An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. (no CVSS, Adcon Telemetry A850 Telemetry Gateway Base Station)
- [CVE-2016-5782](https://cve.now/CVE-2016-5782.md): An issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101, LGate 120, and LGate 320. (no CVSS, Locus Energy LGate through)
- [CVE-2016-5786](https://cve.now/CVE-2016-5786.md): An issue was discovered in OmniMetrix OmniView, Version 1.2. (no CVSS, OmniMetrix OmniView)
- [CVE-2016-5796](https://cve.now/CVE-2016-5796.md): An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. (no CVSS, Fatek Automation Designer)
- [CVE-2016-5798](https://cve.now/CVE-2016-5798.md): An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. (no CVSS, Fatek Automation Designer)
- [CVE-2016-5801](https://cve.now/CVE-2016-5801.md): An issue was discovered in OmniMetrix OmniView, Version 1.2. (no CVSS, OmniMetrix OmniView)
- [CVE-2016-5802](https://cve.now/CVE-2016-5802.md): An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions p (no CVSS, Delta Electronics WPLSoft, ISPSoft, and PMSoft)
- [CVE-2016-5803](https://cve.now/CVE-2016-5803.md): An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. (no CVSS, CA Unified Infrastructure Management 8.47 and earlier)
- [CVE-2016-5805](https://cve.now/CVE-2016-5805.md): An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, and PMSoft, Versions p (no CVSS, Delta Electronics WPLSoft, ISPSoft, and PMSoft)
- [CVE-2016-5809](https://cve.now/CVE-2016-5809.md): An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, IO (no CVSS, Schneider Electric IONXXXX Series)
- [CVE-2016-5811](https://cve.now/CVE-2016-5811.md): An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. (no CVSS, Visonic PowerLink2)
- [CVE-2016-5813](https://cve.now/CVE-2016-5813.md): An issue was discovered in Visonic PowerLink2, all versions prior to October 2016 firmware release. (no CVSS, Visonic PowerLink2)
- [CVE-2016-5815](https://cve.now/CVE-2016-5815.md): An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, IO (no CVSS, Schneider Electric IONXXXX Series Power Meter Vulnerabiliti…)
- [CVE-2016-5818](https://cve.now/CVE-2016-5818.md): An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. (no CVSS, Schneider Electric PowerLogic 2.651 and older)
- [CVE-2016-7987](https://cve.now/CVE-2016-7987.md): An issue was discovered in Siemens ETA4 firmware (all versions prior to Revision 08) of the SM-2558 extension module for: SICAM AK, SICAM TM (no CVSS, Siemens SICAM RTU Devices before)
- [CVE-2016-8341](https://cve.now/CVE-2016-8341.md): An issue was discovered in Ecava IntegraXor Version 5.0.413.0. (no CVSS, Ecava IntegraXor)
- [CVE-2016-8344](https://cve.now/CVE-2016-8344.md): An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Experion PKS, Release 3xx and prior, Experion PKS, Re (no CVSS, Honeywell Experion PKS through)
- [CVE-2016-8346](https://cve.now/CVE-2016-8346.md): An issue was discovered in Moxa EDR-810 Industrial Secure Router. (no CVSS, Moxa EDR-810 Industrial Secure Router)
- [CVE-2016-8347](https://cve.now/CVE-2016-8347.md): An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0. (no CVSS, Kabona AB WDC prior to)
- [CVE-2016-8348](https://cve.now/CVE-2016-8348.md): An XML External Entity (XXE) issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. (no CVSS, Emerson Liebert SiteScan 6.5, and prior)
- [CVE-2016-8350](https://cve.now/CVE-2016-8350.md): An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E121 (no CVSS, Moxa ioLogik E1200 Series before)
- [CVE-2016-8352](https://cve.now/CVE-2016-8352.md): An issue was discovered in Schneider Electric ConneXium firewalls TCSEFEC23F3F20 all versions, TCSEFEC23F3F21 all versions, TCSEFEC23FCF20 a (no CVSS, Schneider Electric ConneXium TCSEFEC2\*)
- [CVE-2016-8353](https://cve.now/CVE-2016-8353.md): An issue was discovered in OSIsoft PI Web API 2015 R2 (Version 1.5.1). (no CVSS, OSIsoft PI Web API 2015 R2)
- [CVE-2016-8354](https://cve.now/CVE-2016-8354.md): An issue was discovered in Schneider Electric Unity PRO prior to V11.1. (no CVSS, Schneider Electric Unity PRO Control prior to)
- [CVE-2016-8356](https://cve.now/CVE-2016-8356.md): An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0. (no CVSS, Kabona AB WDC prior to)
- [CVE-2016-8357](https://cve.now/CVE-2016-8357.md): An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. (no CVSS, Lynxspring JENEsys BAS Bridge 1.1.8 and older)
- [CVE-2016-8359](https://cve.now/CVE-2016-8359.md): An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E121 (no CVSS, Moxa ioLogik E1200 Series before)
- [CVE-2016-8360](https://cve.now/CVE-2016-8360.md): An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. (no CVSS, Moxa SoftCMS prior to)
- [CVE-2016-8361](https://cve.now/CVE-2016-8361.md): An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. (no CVSS, Lynxspring JENEsys BAS Bridge 1.1.8 and older)
- [CVE-2016-8362](https://cve.now/CVE-2016-8362.md): An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 (no CVSS, Moxa OnCell)
- [CVE-2016-8363](https://cve.now/CVE-2016-8363.md): An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 (no CVSS, Moxa OnCell)
- [CVE-2016-8364](https://cve.now/CVE-2016-8364.md): An issue was discovered in IBHsoftec S7-SoftPLC prior to 4.12b. (no CVSS, IBHsoftec S7-SoftPLC CPX43 prior to)
- [CVE-2016-8367](https://cve.now/CVE-2016-8367.md): An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, al (no CVSS, Schneider Electric Magelis HMI)
- [CVE-2016-8368](https://cve.now/CVE-2016-8368.md): An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, (no CVSS, Mitsubishi Electric MELSEC-Q Series Ethernet Interface Modu…)
- [CVE-2016-8369](https://cve.now/CVE-2016-8369.md): An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. (no CVSS, Lynxspring JENEsys BAS Bridge 1.1.8 and older)
- [CVE-2016-8370](https://cve.now/CVE-2016-8370.md): An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, (no CVSS, Mitsubishi Electric MELSEC-Q Series Ethernet Interface Modu…)
- [CVE-2016-8372](https://cve.now/CVE-2016-8372.md): An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E121 (no CVSS, Moxa ioLogik E1200 Series before)
- [CVE-2016-8374](https://cve.now/CVE-2016-8374.md): An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, al (no CVSS, Schneider Electric Magelis HMI)
- [CVE-2016-8376](https://cve.now/CVE-2016-8376.md): An issue was discovered in Kabona AB WebDatorCentral (WDC) application prior to Version 3.4.0. (no CVSS, Kabona AB WDC Vulnerabilities prior to)
- [CVE-2016-8377](https://cve.now/CVE-2016-8377.md): An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. (no CVSS, Fatek Automation PLC WinProladder 3.11 Build)
- [CVE-2016-8378](https://cve.now/CVE-2016-8378.md): An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. (no CVSS, Lynxspring JENEsys BAS Bridge 1.1.8 and older)
- [CVE-2016-8379](https://cve.now/CVE-2016-8379.md): An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E121 (no CVSS, Moxa ioLogik E1200 Series before)
- [CVE-2016-8566](https://cve.now/CVE-2016-8566.md): An issue was discovered in Siemens SICAM PAS before 8.00. (no CVSS, Siemens SICAM PAS before)
- [CVE-2016-8567](https://cve.now/CVE-2016-8567.md): An issue was discovered in Siemens SICAM PAS before 8.00. (no CVSS, Siemens SICAM PAS before)
- [CVE-2016-9332](https://cve.now/CVE-2016-9332.md): An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. (no CVSS, Moxa SoftCMS prior to)
- [CVE-2016-9333](https://cve.now/CVE-2016-9333.md): An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. (no CVSS, Moxa SoftCMS prior to)
- [CVE-2016-9334](https://cve.now/CVE-2016-9334.md): An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prio (no CVSS, Rockwell Automation MicroLogix 1100 and)
- [CVE-2016-9337](https://cve.now/CVE-2016-9337.md): An issue was discovered in Tesla Motors Model S automobile, all firmware versions before version 7.1 (2.36.31) with web browser functionalit (no CVSS, Tesla Gateway ECU on Model S automobile)
- [CVE-2016-9338](https://cve.now/CVE-2016-9338.md): An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prio (no CVSS, Rockwell Automation MicroLogix 1100 and)
- [CVE-2016-9339](https://cve.now/CVE-2016-9339.md): An issue was discovered in INTERSCHALT Maritime Systems VDR G4e Versions 5.220 and prior. (no CVSS, INTERSCHALT VDR G4e 5.220 and prior)
- [CVE-2016-9343](https://cve.now/CVE-2016-9343.md): An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware (no CVSS, Rockwell Automation Logix5000 Programmable Automation Contr…)
- [CVE-2016-9344](https://cve.now/CVE-2016-9344.md): An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. (no CVSS, Moxa MiiNePort)
- [CVE-2016-9345](https://cve.now/CVE-2016-9345.md): An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. (no CVSS, Emerson DeltaV Easy Security Management through)
- [CVE-2016-9346](https://cve.now/CVE-2016-9346.md): An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. (no CVSS, Moxa MiiNePort)
- [CVE-2016-9347](https://cve.now/CVE-2016-9347.md): An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. (no CVSS, Emerson DeltaV Wireless I/O Card)
- [CVE-2016-9348](https://cve.now/CVE-2016-9348.md): An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p (no CVSS, Moxa NPort)
- [CVE-2016-9349](https://cve.now/CVE-2016-9349.md): An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. (no CVSS, Advantech SUSIAccess Server 3.0 and prior)
- [CVE-2016-9351](https://cve.now/CVE-2016-9351.md): An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. (no CVSS, Advantech SUSIAccess Server 3.0 and prior)
- [CVE-2016-9353](https://cve.now/CVE-2016-9353.md): An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. (no CVSS, Advantech SUSIAccess Server 3.0 and prior)
- [CVE-2016-9354](https://cve.now/CVE-2016-9354.md): An issue was discovered in Moxa DACenter Versions 1.4 and older. (no CVSS, Moxa DACenter 1.4 and older)
- [CVE-2016-9356](https://cve.now/CVE-2016-9356.md): An issue was discovered in Moxa DACenter Versions 1.4 and older. (no CVSS, Moxa DACenter 1.4 and older)
- [CVE-2016-9357](https://cve.now/CVE-2016-9357.md): An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life (EoL) and no longer supported: EAMxxx pr (no CVSS, Eaton ePDU EoL devices)
- [CVE-2016-9360](https://cve.now/CVE-2016-9360.md): An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions, Proficy HMI/SCADA CIMPLICITY (no CVSS, GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, an…)
- [CVE-2016-9361](https://cve.now/CVE-2016-9361.md): An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p (CVSS 9.8, Moxa NPort)
- [CVE-2016-9362](https://cve.now/CVE-2016-9362.md): An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and (no CVSS, WAGO Ethernet cards)
- [CVE-2016-9363](https://cve.now/CVE-2016-9363.md): An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p (CVSS 7.3, Moxa NPort)
- [CVE-2016-9364](https://cve.now/CVE-2016-9364.md): An issue was discovered in Fidelix FX-20 series controllers, versions prior to 11.50.19. (no CVSS, Fidelix FX-20 Series Controllers prior to)
- [CVE-2016-9365](https://cve.now/CVE-2016-9365.md): An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p (CVSS 8.8, Moxa NPort)
- [CVE-2016-9366](https://cve.now/CVE-2016-9366.md): An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p (CVSS 9.8, Moxa NPort)
- [CVE-2016-9367](https://cve.now/CVE-2016-9367.md): An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p (CVSS 7.5, Moxa NPort)
- [CVE-2016-9369](https://cve.now/CVE-2016-9369.md): An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p (CVSS 9.8, Moxa NPort)
- [CVE-2016-9371](https://cve.now/CVE-2016-9371.md): An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p (no CVSS, Moxa NPort)
- [CVE-2017-5139](https://cve.now/CVE-2017-5139.md): An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. (no CVSS, Honeywell XL Web II Controller)
- [CVE-2017-5140](https://cve.now/CVE-2017-5140.md): An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. (no CVSS, Honeywell XL Web II Controller)
- [CVE-2017-5141](https://cve.now/CVE-2017-5141.md): An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. (no CVSS, Honeywell XL Web II Controller)
- [CVE-2017-5142](https://cve.now/CVE-2017-5142.md): An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. (no CVSS, Honeywell XL Web II Controller)
- [CVE-2017-5143](https://cve.now/CVE-2017-5143.md): An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. (no CVSS, Honeywell XL Web II Controller)
- [CVE-2017-5144](https://cve.now/CVE-2017-5144.md): An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11\_U05, and VMU-C PV prior to firmware Version A17. (no CVSS, Carlo Gavazzi VMU-C EM and VMU-C PV)
- [CVE-2017-5145](https://cve.now/CVE-2017-5145.md): An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11\_U05, and VMU-C PV prior to firmware Version A17. (no CVSS, Carlo Gavazzi VMU-C EM and VMU-C PV)
- [CVE-2017-5146](https://cve.now/CVE-2017-5146.md): An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11\_U05, and VMU-C PV prior to firmware Version A17. (no CVSS, Carlo Gavazzi VMU-C EM and VMU-C PV)
- [CVE-2017-5151](https://cve.now/CVE-2017-5151.md): An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. (no CVSS, VideoInsight Web Client 6.3.5.11 and previous)
- [CVE-2017-5152](https://cve.now/CVE-2017-5152.md): An issue was discovered in Advantech WebAccess Version 8.1. (no CVSS, Advantech WebAccess)
- [CVE-2017-5153](https://cve.now/CVE-2017-5153.md): An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services (no CVSS, OSIsoft PI Coresight and PI Web API)
- [CVE-2017-5154](https://cve.now/CVE-2017-5154.md): An issue was discovered in Advantech WebAccess Version 8.1. (no CVSS, Advantech WebAccess)
- [CVE-2017-5155](https://cve.now/CVE-2017-5155.md): An issue was discovered in Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and earlier. (no CVSS, Schneider Electric Wonderware Historian 2014 R2 SP1 P01 and…)
- [CVE-2017-5157](https://cve.now/CVE-2017-5157.md): An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. (no CVSS, Schneider Electric homeLYnk Controller prior to)
- [CVE-2017-5159](https://cve.now/CVE-2017-5159.md): An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. (no CVSS, Phoenix Contact mGuard)
- [CVE-2017-5161](https://cve.now/CVE-2017-5161.md): An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, vers (no CVSS, Sielco Sistemi Winlog SCADA Software prior to)
- [CVE-2017-5162](https://cve.now/CVE-2017-5162.md): An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. (no CVSS, BINOM3 Electric Power Quality Meter)
- [CVE-2017-5163](https://cve.now/CVE-2017-5163.md): An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. (no CVSS, Belden Hirschmann GECKO 2.0.00 and prior)
- [CVE-2017-5164](https://cve.now/CVE-2017-5164.md): An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. (no CVSS, BINOM3 Electric Power Quality Meter)
- [CVE-2017-5165](https://cve.now/CVE-2017-5165.md): An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. (no CVSS, BINOM3 Electric Power Quality Meter)
- [CVE-2017-5166](https://cve.now/CVE-2017-5166.md): An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. (no CVSS, BINOM3 Electric Power Quality Meter)
- [CVE-2017-5167](https://cve.now/CVE-2017-5167.md): An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. (no CVSS, BINOM3 Electric Power Quality Meter)
- [CVE-2017-5168](https://cve.now/CVE-2017-5168.md): An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. (no CVSS, Hanwha Techwin Smart Security Manager Versions 1.5 and prior)
- [CVE-2017-5169](https://cve.now/CVE-2017-5169.md): An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. (no CVSS, Hanwha Techwin Smart Security Manager 1.5 and prior)
- [CVE-2014-9760](https://cve.now/CVE-2014-9760.md): Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2015-8750](https://cve.now/CVE-2015-8750.md): libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug\_abbrev s (no CVSS)
- [CVE-2015-8768](https://cve.now/CVE-2015-8768.md): click/install.py in click does not require files in package filesystem tarballs to start with ./ (dot slash), which allows remote attackers (no CVSS)
- [CVE-2015-8771](https://cve.now/CVE-2015-8771.md): The generate\_smb\_nt\_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted passw (no CVSS)
- [CVE-2016-10026](https://cve.now/CVE-2016-10026.md): ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges p (no CVSS)
- [CVE-2016-2568](https://cve.now/CVE-2016-2568.md): pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes cha (no CVSS)
- [CVE-2016-2787](https://cve.now/CVE-2016-2787.md): The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node (no CVSS)
- [CVE-2016-2788](https://cve.now/CVE-2016-2788.md): MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors relate (no CVSS)
- [CVE-2016-3616](https://cve.now/CVE-2016-3616.md): The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execut (no CVSS)
- [CVE-2016-3995](https://cve.now/CVE-2016-3995.md): The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5. (no CVSS)
- [CVE-2016-4546](https://cve.now/CVE-2016-4546.md): Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted da (no CVSS)
- [CVE-2016-4547](https://cve.now/CVE-2016-4547.md): Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system (no CVSS)
- [CVE-2016-5100](https://cve.now/CVE-2016-5100.md): Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the passw (no CVSS, froxlor/froxlor)
- [CVE-2016-6129](https://cve.now/CVE-2016-6129.md): The rsa\_verify\_hash\_ex function in rsa\_verify\_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message leng (no CVSS)
- [CVE-2016-7565](https://cve.now/CVE-2016-7565.md): install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array param (no CVSS)
- [CVE-2016-8659](https://cve.now/CVE-2016-8659.md): Bubblewrap before 0.1.3 sets the PR\_SET\_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demo (no CVSS)
- [CVE-2016-8859](https://cve.now/CVE-2016-8859.md): Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or ( (no CVSS)
- [CVE-2017-3896](https://cve.now/CVE-2017-3896.md): Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 al (no CVSS, Intel McAfee Agent)
- [CVE-2017-3902](https://cve.now/CVE-2017-3902.md): Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenti (no CVSS, Intel ePO)
- [CVE-2016-8495](https://cve.now/CVE-2016-8495.md): An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker (no CVSS, Fortinet FortiManager)
- [CVE-2016-6210](https://cve.now/CVE-2016-6210.md): sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the us (CVSS 5.9)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-02-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.