CVEs published February 15, 2017
92 CVEs were published on February 15, 2017: 0 critical, 0 high.
- Published
- 92
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 92
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Adobe Flash Player 24.0.0.194 and earlier.
- 13
- Nvidia Windows GPU Display Driver
- 10
- Adobe Digital Editions 4.5.3 and earlier.
- 9
- Nvidia GPU Display Driver
- 5
- IBM AIX
- 3
- Adobe Campaign 16.4 Build 8724 and earlier.
- 2
- IBM Integration Bus
- 2
- Cisco UCS Director versions 6.0.0.0 and
- 1
- IBM Cognos Disclosure Management
- 1
- IBM Rational Collaborative Lifecycle Management
- 1
Medium, low and unrated 92
- CVE-2017-0308All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape Nvidia Windows GPU Display Driver
- CVE-2017-0309All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may causNvidia GPU Display Driver
- CVE-2017-0310All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper access controls allowing uNvidia GPU Display Driver
- CVE-2017-0311NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer handler where improper access control may lead to denial ofNvidia GPU Display Driver
- CVE-2017-0312All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscapeINvidia Windows GPU Display Driver
- CVE-2017-0313All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmNvidia Windows GPU Display Driver
- CVE-2017-0314All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the SubmNvidia Windows GPU Display Driver
- CVE-2017-0315All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape Nvidia Windows GPU Display Driver
- CVE-2017-0317All versions of NVIDIA GPU and GeForce Experience installer contain a vulnerability where it fails to set proper permissions on the package Nvidia Windows GPU Display Driver
- CVE-2017-0318All versions of NVIDIA Linux GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper validation of an inpNvidia Linux GPU Display Driver
- CVE-2017-0319All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of valuesNvidia Windows GPU Display Driver
- CVE-2017-0320All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper handling of valuesNvidia Windows GPU Display Driver
- CVE-2017-0321All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused bNvidia GPU Display Driver
- CVE-2017-0322All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a value passNvidia Windows GPU Display Driver
- CVE-2017-0323All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference Nvidia GPU Display Driver
- CVE-2017-0324All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape Nvidia Windows GPU Display Driver
- CVE-2016-7392Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to ca
- CVE-2016-7393Stack-based buffer overflow in the aac_sync function in aac_parser.c in Libav before 11.5 allows remote attackers to cause a denial of servi
- CVE-2016-7477The ff_put_pixels8_xy2_mmx function in rnd_template.c in Libav 11.7 allows remote attackers to cause a denial of service (invalid memory acc
- CVE-2016-7499The sbr_make_f_master function in aacsbr.c in Libav 11.7 allows remote attackers to cause a denial of service (divide-by-zero error and appl
- CVE-2016-8674The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and applic
- CVE-2016-8675The get_vlc2 function in get_bits.h in Libav before 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and
- CVE-2016-8676The get_vlc2 function in get_bits.h in Libav 11.9 allows remote attackers to cause a denial of service (NULL pointer dereference and crash)
- CVE-2016-8677The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact v
- CVE-2016-8678The IsPixelMonochrome function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.0 allows remote attackers to cause a denial of service (o
- CVE-2016-8679The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial of servic
- CVE-2016-8680The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of servic
- CVE-2016-8681The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of servic
- CVE-2017-3801A vulnerability in the web-based GUI of Cisco UCS Director 6.0.0.0 and 6.0.0.1 could allow an authenticated, local attacker to execute arbitCisco UCS Director versions 6.0.0.0 and
- CVE-2016-0360IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources which could allowIBM WebSphere MQ
- CVE-2016-3694Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed,
- CVE-2016-6033IBM Tivoli Storage Manager for Virtual Environments 7.1 (VMware) is vulnerable to cross-site request forgery which could allow an attacker tIBM Tivoli Storage Manager for Virtual Environments
- CVE-2016-6060An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names.IBM Rational DOORS Next Generation
- CVE-2016-6077IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a maliciousIBM Cognos Disclosure Management
- CVE-2016-6079IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privIBM AIX
- CVE-2016-6832Heap-based buffer overflow in the ff_audio_resample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of
- CVE-2016-6866slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference a
- CVE-2016-8682The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read)
- CVE-2016-8683The ReadPCXImage function in coders/pcx.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, w
- CVE-2016-8684The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image
- CVE-2016-8687Stack-based buffer overflow in the safe_fprintf function in tar/util.c in libarchive 3.2.1 allows remote attackers to cause a denial of serv
- CVE-2016-8688The mtree bidder in libarchive 3.2.1 does not keep track of line sizes when extending the read-ahead, which allows remote attackers to cause
- CVE-2016-8689The read_Header function in archive_read_support_format_7zip.c in libarchive 3.2.1 allows remote attackers to cause a denial of service (out
- CVE-2016-8690The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL poin
- CVE-2016-8691The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (d
- CVE-2016-8692The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (d
- CVE-2016-8693Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of s
- CVE-2016-8862The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via
- CVE-2016-8866The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified im
- CVE-2016-8944IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would crash the system.IBM AIX
- CVE-2016-8968IBM Jazz Foundation is vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2016-8972IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client.IBM AIX
- CVE-2016-9010IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim.IBM Integration Bus
- CVE-2016-9560Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspe
- CVE-2016-9706IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External EntIBM Integration Bus
- CVE-2017-5896Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of
- CVE-2017-5992Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.openpyxl
- CVE-2017-5997The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service (memory consumption and proc
- CVE-2013-7459Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers pycrypto
- CVE-2015-8979Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to
- CVE-2016-10089Nagios 4.3.2 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-20
- CVE-2016-1880The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentia
- CVE-2016-1881The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service (crash) or potentially gain privilege via a crafte
- CVE-2016-1883The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecifi
- CVE-2016-1888The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authenticatio
- CVE-2016-1889Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows l
- CVE-2017-2968Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability.Adobe Campaign 16.4 Build 8724 and earlier.
- CVE-2017-2969Adobe Campaign versions 16.4 Build 8724 and earlier have a cross-site scripting (XSS) vulnerability.Adobe Campaign 16.4 Build 8724 and earlier.
- CVE-2017-2973Adobe Digital Editions versions 4.5.3 and earlier have an exploitable heap overflow vulnerability.Adobe Digital Editions 4.5.3 and earlier.
- CVE-2017-2974Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability.Adobe Digital Editions 4.5.3 and earlier.
- CVE-2017-2975Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability.Adobe Digital Editions 4.5.3 and earlier.
- CVE-2017-2976Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability.Adobe Digital Editions 4.5.3 and earlier.
- CVE-2017-2977Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability.Adobe Digital Editions 4.5.3 and earlier.
- CVE-2017-2978Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability.Adobe Digital Editions 4.5.3 and earlier.
- CVE-2017-2979Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability.Adobe Digital Editions 4.5.3 and earlier.
- CVE-2017-2980Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability.Adobe Digital Editions 4.5.3 and earlier.
- CVE-2017-2981Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability.Adobe Digital Editions 4.5.3 and earlier.
- CVE-2017-2982Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related to player shutdown.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2984Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2985Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2986Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2987Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2988Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2990Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2991Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decomprAdobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2992Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2993Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event handlers.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2994Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK event dispatch.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2995Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the MessageChannel class.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-2996Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK.Adobe Flash Player 24.0.0.194 and earlier.
- CVE-2017-5990An issue was discovered in PhreeBooksERP before 2017-02-13.
- CVE-2017-5991An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465.