# CVEs published 2017-02-23

11 CVEs were published on February 23, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9916](https://cve.now/CVE-2014-9916.md): Multiple cross-site scripting (XSS) vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2017-6076](https://cve.now/CVE-2017-6076.md): In versions of wolfSSL before 3.10.2 the function fp\_mul\_comba makes it easier to extract RSA key information for a malicious user who has a (no CVSS)
- [CVE-2017-6099](https://cve.now/CVE-2017-6099.md): Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote at (no CVSS, paypal/merchant-sdk-php)
- [CVE-2016-10109](https://cve.now/CVE-2016-10109.md): Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses (no CVSS)
- [CVE-2017-6100](https://cve.now/CVE-2017-6100.md): tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP. (no CVSS)
- [CVE-2017-6214](https://cve.now/CVE-2017-6214.md): The tcp\_splice\_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infin (no CVSS)
- [CVE-2016-5883](https://cve.now/CVE-2016-5883.md): IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. (no CVSS, IBM iNotes)
- [CVE-2016-6055](https://cve.now/CVE-2016-6055.md): IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational DOORS Next Generation)
- [CVE-2016-8974](https://cve.now/CVE-2016-8974.md): IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processin (no CVSS, IBM Rational Rhapsody Design Manager)
- [CVE-2017-6205](https://cve.now/CVE-2017-6205.md): D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware be (no CVSS)
- [CVE-2017-6206](https://cve.now/CVE-2017-6206.md): D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware be (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-02-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.