CVEs published February 27, 2017
30 CVEs were published on February 27, 2017: 0 critical, 3 high.
- Published
- 30
- Critical
- 0
- High
- 3
- Medium
- 0
- Low
- 0
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Iceni Argus
- 3
- RUGGEDCOM NMS All versions <
- 2
- Intel Ethernet Controller X710 family and Intel Ethernet Co…
- 1
- rubyzip
- 1
High 3
- CVE-2016-8385An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus.Iceni Argus
- CVE-2016-8386An exploitable heap-based buffer overflow exists in Iceni Argus.Iceni Argus
- CVE-2016-8387An exploitable heap-based buffer overflow exists in Iceni Argus.Iceni Argus
Medium, low and unrated 27
- CVE-2015-8900The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) vi
- CVE-2015-8901ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file.
- CVE-2015-8902The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infin
- CVE-2015-8903The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (i
- CVE-2016-10028The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support a
- CVE-2016-10029The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users t
- CVE-2016-5240The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers t
- CVE-2016-7553The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which mi
- CVE-2016-9815Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by sending an asynchronous abort.
- CVE-2016-9816Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort whil
- CVE-2016-9817Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch
- CVE-2016-9818Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort whil
- CVE-2016-8105Drivers for the Intel Ethernet Controller X710 and Intel Ethernet Controller XL710 families before version 22.0 are vulnerable to a denial oIntel Ethernet Controller X710 family and Intel Ethernet Co…
- CVE-2017-2682The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site RequestRUGGEDCOM NMS All versions <
- CVE-2017-2683A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-SitRUGGEDCOM NMS All versions <
- CVE-2017-5925Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel p
- CVE-2017-5926Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD pro
- CVE-2017-5927Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM pro
- CVE-2017-5928The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a
- CVE-2017-5946The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability.rubyzip
- CVE-2017-6297The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-mid
- CVE-2017-6341Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software
- CVE-2017-6342An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-0
- CVE-2017-6343The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29,
- CVE-2017-6344XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.
- CVE-2017-6349An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate valu
- CVE-2017-6350An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate