CVEs published February 21, 2017
21 CVEs were published on February 21, 2017: 2 critical, 1 high.
- Published
- 21
- Critical
- 2
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 18
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Aerospike Database Server
- 3
Critical 2
- CVE-2016-9051An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.Aerospike Database Server
- CVE-2016-9053An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3.Aerospike Database Server
High 1
Medium, low and unrated 18
- CVE-2017-6127Multiple cross-site request forgery (CSRF) vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.
- CVE-2015-4056The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which makes it easier for loc
- CVE-2015-4057The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Se
- CVE-2016-10227Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service (CPU consumption) via a flood
- CVE-2016-9269Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version
- CVE-2016-9314Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA)
- CVE-2016-9315Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual A
- CVE-2016-9316Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterSca
- CVE-2017-5881GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact vi
- CVE-2017-5959CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges.
- CVE-2017-6070CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_t
- CVE-2017-6071CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via export
- CVE-2017-6072CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaul
- CVE-2017-6078FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with
- CVE-2017-6095A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.
- CVE-2017-6096A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.
- CVE-2017-6097A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.
- CVE-2017-6098A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.