# CVEs published 2017-02-28

12 CVEs were published on February 28, 2017: 0 critical, 3 high. Days are UTC.

- [CVE-2017-5682](https://cve.now/CVE-2017-5682.md): Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advis (no CVSS, Intel Parallel Studio XE, Intel System Studio, Intel VTune…)
- [CVE-2016-10207](https://cve.now/CVE-2016-10207.md): The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS hand (no CVSS)
- [CVE-2016-9259](https://cve.now/CVE-2016-9259.md): Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.1 allows remote authenticated users to inject arbitrary web script or (no CVSS)
- [CVE-2016-9261](https://cve.now/CVE-2016-9261.md): Cross-site scripting (XSS) vulnerability in Tenable Log Correlation Engine (aka LCE) before 4.8.1 allows remote authenticated users to injec (no CVSS)
- [CVE-2016-9558](https://cve.now/CVE-2016-9558.md): (1) libdwarf/dwarf\_leb.c and (2) dwarfdump/print\_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via (no CVSS)
- [CVE-2017-5581](https://cve.now/CVE-2017-5581.md): Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via (no CVSS)
- [CVE-2017-5884](https://cve.now/CVE-2017-5884.md): gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary c (no CVSS)
- [CVE-2017-5885](https://cve.now/CVE-2017-5885.md): Multiple integer overflows in the (1) vnc\_connection\_server\_message and (2) vnc\_color\_map\_set functions in gtk-vnc before 0.7.0 allow remote (no CVSS)
- [CVE-2016-8388](https://cve.now/CVE-2016-8388.md): An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. (CVSS 8.8, Iceni Argus)
- [CVE-2016-8389](https://cve.now/CVE-2016-8389.md): An exploitable integer-overflow vulnerability exists within Iceni Argus. (CVSS 8.8, Iceni Argus)
- [CVE-2016-8715](https://cve.now/CVE-2016-8715.md): An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. (CVSS 8.8, Iceni Argus)
- [CVE-2017-5982](https://cve.now/CVE-2017-5982.md): Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (en (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-02-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.