CVEs published February 16, 2017
28 CVEs were published on February 16, 2017: 0 critical, 0 high.
- Published
- 28
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 28
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- IBM Access Manager
- 1
- IBM Resilient
- 1
- org.wso2.carbon.commons:org.wso2.carbon.logging.view.ui
- 1
- org.wso2.carbon.commons:org.wso2.carbon.ndatasource.ui ·… +1
- 1
- simplesamlphp/saml2
- 1
- simplesamlphp/simplesamlphp
- 1
- zendframework/zendframework
- 1
- zendframework/zendframework · zendframework/zendframework1
- 1
Medium, low and unrated 28
- CVE-2016-5919IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker IBM Access Manager
- CVE-2016-6062IBM Resilient v26.0, v26.1, and v26.2 is vulnerable to cross-site scripting.IBM Resilient
- CVE-2016-10134SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the t
- CVE-2016-1249The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of servic
- CVE-2016-4311Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack th
- CVE-2016-4312XML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows r
- CVE-2016-4314Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arborg.wso2.carbon.commons:org.wso2.carbon.logging.view.ui
- CVE-2016-4315Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged user
- CVE-2016-4316Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via torg.wso2.carbon.commons:org.wso2.carbon.ndatasource.ui ·… +1
- CVE-2016-4327Cross-site scripting (XSS) vulnerability in WSO2 SOA Enablement Server for Java/6.6 build SSJ-6.6-20090827-1616 and earlier allows remote at
- CVE-2016-4861The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injeczendframework/zendframework
- CVE-2016-5417Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.
- CVE-2016-6233The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injeczendframework/zendframework · zendframework/zendframework1
- CVE-2016-8652The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash)
- CVE-2016-9139Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16, 4.0.x before 4.0.19, and 5.0.x before 5.0
- CVE-2016-9637The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest O
- CVE-2016-9773Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to caus
- CVE-2016-9814The validateSignature method in the SAML2\Utils class in SimpleSAMLphp before 1.14.10 and simplesamlphp/saml2 library before 1.9.1, 1.10.x bsimplesamlphp/saml2
- CVE-2016-9827The _iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service (buffer over-
- CVE-2016-9828The dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service (NULL pointer de
- CVE-2016-9829Heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to h
- CVE-2016-9831Heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to have un
- CVE-2016-9955The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 resimplesamlphp/simplesamlphp
- CVE-2017-5357regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid fre
- CVE-2017-6004The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled versio
- CVE-2017-6009An issue was discovered in icoutils 0.31.1.
- CVE-2017-6010An issue was discovered in icoutils 0.31.1.
- CVE-2017-6011An issue was discovered in icoutils 0.31.1.