CVEs published February 22, 2017
41 CVEs were published on February 22, 2017: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 41
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 40
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- Cisco Unified Communications Manager
- 5
- Cisco Secure Access Control System
- 4
- IBM WebSphere MQ
- 4
- Cisco Prime Collaboration Assurance
- 3
- Cisco Meeting Server
- 2
- html5lib
- 2
- Cisco AsyncOS Software for Cisco ESA and Cisco WSA
- 1
- Cisco Firepower Management Center Web Framework
- 1
- Cisco Identity Services Engine
- 1
- Cisco Intrusion Prevention System Device Manager
- 1
Critical 1
Medium, low and unrated 40
- CVE-2016-1245It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 NeighQuagga before
- CVE-2017-6187Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI i
- CVE-2016-3013IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling.IBM WebSphere MQ
- CVE-2016-3052Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network.IBM WebSphere MQ
- CVE-2016-8915IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to other channels runningIBM WebSphere MQ
- CVE-2016-8986IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HTIBM WebSphere MQ
- CVE-2017-6188Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled.
- CVE-2014-4677The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local users to execute arbit
- CVE-2016-8636Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users
- CVE-2016-9377Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local
- CVE-2016-9378Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local
- CVE-2016-9384Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.
- CVE-2016-9400The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary ph
- CVE-2016-9909The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishanhtml5lib
- CVE-2016-9910The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishanhtml5lib
- CVE-2016-9956The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.
- CVE-2017-5585OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row
- CVE-2017-5586OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java
- CVE-2016-9682The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web ad
- CVE-2016-9683The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web admini
- CVE-2016-9684The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web admini
- CVE-2017-2684Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network accessSIMATIC Logon All versions < V1.5 SP3 Update
- CVE-2017-3821A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conducCisco Unified Communications Manager
- CVE-2017-3827A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ECisco AsyncOS Software for Cisco ESA and Cisco WSA
- CVE-2017-3828A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remotCisco Unified Communications Manager
- CVE-2017-3829A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remotCisco Unified Communications Manager
- CVE-2017-3830A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to cause a denial of seCisco Meeting Server
- CVE-2017-3833A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a crCisco Unified Communications Manager
- CVE-2017-3835A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access noticeCisco Identity Services Engine
- CVE-2017-3836A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive Cisco Unified Communications Manager
- CVE-2017-3837An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Conferencing Server, cCisco Meeting Server
- CVE-2017-3838A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-sitCisco Secure Access Control System
- CVE-2017-3839An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenCisco Secure Access Control System
- CVE-2017-3840A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to rediCisco Secure Access Control System
- CVE-2017-3841A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to discCisco Secure Access Control System
- CVE-2017-3842A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) could allow an unauthentCisco Intrusion Prevention System Device Manager
- CVE-2017-3843A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to downCisco Prime Collaboration Assurance
- CVE-2017-3844A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote atCisco Prime Collaboration Assurance
- CVE-2017-3845A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attackerCisco Prime Collaboration Assurance
- CVE-2017-3847A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-sCisco Firepower Management Center Web Framework