CVEs published February 17, 2017
59 CVEs were published on February 17, 2017: 0 critical, 0 high.
- Published
- 59
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 59
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Google Chrome prior to 56.0.2924.76 for Linux, Windows and…
- 19
- Google Chrome prior to 56.0.2924.76 for Linux
- 1
- Google Chrome prior to 56.0.2924.76 for Mac
- 1
- Google Chrome prior to 56.0.2924.76 for Windows
- 1
- mantisbt/mantisbt
- 1
Medium, low and unrated 59
- CVE-2017-6055XML external entity (XXE) vulnerability in eParakstitajs 3 before 1.3.9 and eParaksts Java lib before 2.5.13 allows remote attackers to read
- CVE-2017-6065SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to exec
- CVE-2014-9905Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to inject arbitrary web
- CVE-2016-5028The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereferen
- CVE-2016-5029The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer derefer
- CVE-2016-5030The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL po
- CVE-2016-5031The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) vi
- CVE-2016-5032The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (crash) via a crafted
- CVE-2016-5033The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via
- CVE-2016-5034dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file
- CVE-2016-5035The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attackers to cause a denia
- CVE-2016-5036The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds
- CVE-2016-5037The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference)
- CVE-2016-5038The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of servic
- CVE-2016-5039The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a craf
- CVE-2016-5040libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length value in a c
- CVE-2016-5042The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (infinite loop and cras
- CVE-2016-5043The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) v
- CVE-2016-5044The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-
- CVE-2016-5364Cross-site scripting (XSS) vulnerability in manage_custom_field_edit_page.php in MantisBT 1.2.19 and earlier allows remote attackers to inje
- CVE-2016-6189Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading
- CVE-2016-6190SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote authenticated users
- CVE-2016-6191Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attack
- CVE-2016-6252Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.
- CVE-2016-6870Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM before 3.15.0 allows
- CVE-2016-6871Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, which triggers a
- CVE-2016-6872Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
- CVE-2016-6873Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
- CVE-2016-6874The array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, related to r
- CVE-2016-6875Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
- CVE-2016-7111MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a weak Content Security Policy when using the Gravatar plugin, which allows remote atmantisbt/mantisbt
- CVE-2016-7510The read_line_table_program function in dwarf_line_table_reader_common.c in libdwarf before 20160923 allows remote attackers to cause a deni
- CVE-2016-7511Integer overflow in the dwarf_die_deliv.c in libdwarf 20160613 allows remote attackers to cause a denial of service (crash) via a crafted fi
- CVE-2017-5006Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relaGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5007Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of eGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5008Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScripGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5009WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5010Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriateGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5011Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a userGoogle Chrome prior to 56.0.2924.76 for Windows
- CVE-2017-5012A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remoGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5013Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attaGoogle Chrome prior to 56.0.2924.76 for Linux
- CVE-2017-5014Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 forGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5015Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which alloGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5016Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elementsGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5017Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attackerGoogle Chrome prior to 56.0.2924.76 for Mac
- CVE-2017-5018Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security Google Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5019A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker Google Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5020Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful Google Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5021A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker Google Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5022Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inlGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5023Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remotGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5024FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote aGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5025FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote aGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5026Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which aGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5027Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inlGoogle Chrome prior to 56.0.2924.76 for Linux, Windows and…
- CVE-2017-5344An issue was discovered in dotCMS through 3.6.1.
- CVE-2017-5998Cross-site scripting (XSS) vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject
- CVE-2017-6014In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory exhaustion.
- CVE-2017-6056It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in den