# CVEs published 2017-02-21

21 CVEs were published on February 21, 2017: 2 critical, 1 high. Days are UTC.

- [CVE-2016-9049](https://cve.now/CVE-2016-9049.md): An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3. (CVSS 7.5, Aerospike Database Server)
- [CVE-2016-9051](https://cve.now/CVE-2016-9051.md): An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3. (CVSS 9.8, Aerospike Database Server)
- [CVE-2016-9053](https://cve.now/CVE-2016-9053.md): An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. (CVSS 9.8, Aerospike Database Server)
- [CVE-2017-6127](https://cve.now/CVE-2017-6127.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00. (no CVSS)
- [CVE-2015-4056](https://cve.now/CVE-2015-4056.md): The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which makes it easier for loc (no CVSS)
- [CVE-2015-4057](https://cve.now/CVE-2015-4057.md): The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Se (no CVSS)
- [CVE-2016-10227](https://cve.now/CVE-2016-10227.md): Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service (CPU consumption) via a flood (no CVSS)
- [CVE-2016-9269](https://cve.now/CVE-2016-9269.md): Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version (no CVSS)
- [CVE-2016-9314](https://cve.now/CVE-2016-9314.md): Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) (no CVSS)
- [CVE-2016-9315](https://cve.now/CVE-2016-9315.md): Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual A (no CVSS)
- [CVE-2016-9316](https://cve.now/CVE-2016-9316.md): Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterSca (no CVSS)
- [CVE-2017-5881](https://cve.now/CVE-2017-5881.md): GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact vi (no CVSS)
- [CVE-2017-5959](https://cve.now/CVE-2017-5959.md): CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. (no CVSS)
- [CVE-2017-6070](https://cve.now/CVE-2017-6070.md): CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp\_forma\_form\_t (no CVSS)
- [CVE-2017-6071](https://cve.now/CVE-2017-6071.md): CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via export (no CVSS)
- [CVE-2017-6072](https://cve.now/CVE-2017-6072.md): CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaul (no CVSS)
- [CVE-2017-6078](https://cve.now/CVE-2017-6078.md): FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with (no CVSS)
- [CVE-2017-6095](https://cve.now/CVE-2017-6095.md): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6096](https://cve.now/CVE-2017-6096.md): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6097](https://cve.now/CVE-2017-6097.md): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6098](https://cve.now/CVE-2017-6098.md): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-02-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.