CVEs published February 23, 2017
11 CVEs were published on February 23, 2017: 0 critical, 0 high.
- Published
- 11
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- IBM iNotes
- 1
- IBM Rational DOORS Next Generation
- 1
- IBM Rational Rhapsody Design Manager
- 1
- paypal/merchant-sdk-php
- 1
Medium, low and unrated 11
- CVE-2014-9916Multiple cross-site scripting (XSS) vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the
- CVE-2017-6076In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has a
- CVE-2017-6099Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote atpaypal/merchant-sdk-php
- CVE-2016-10109Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses
- CVE-2017-6100tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.
- CVE-2017-6214The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infin
- CVE-2016-5883IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.IBM iNotes
- CVE-2016-6055IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.IBM Rational DOORS Next Generation
- CVE-2016-8974IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processinIBM Rational Rhapsody Design Manager
- CVE-2017-6205D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware be
- CVE-2017-6206D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware be