# CVEs published 2016-03-03

19 CVEs were published on March 3, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0718](https://cve.now/CVE-2015-0718.md): Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows… (no CVSS)
- [CVE-2015-6260](https://cve.now/CVE-2015-6260.md): Cisco NX-OS 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote… (no CVSS)
- [CVE-2015-7490](https://cve.now/CVE-2015-7490.md): IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote… (no CVSS)
- [CVE-2016-0227](https://cve.now/CVE-2016-0227.md): Cross-site scripting (XSS) vulnerability in the document-list control implementation in IBM Business Process Manager (BPM) 8.0 through… (no CVSS)
- [CVE-2016-1158](https://cve.now/CVE-2016-1158.md): Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers to hijack the… (no CVSS)
- [CVE-2016-1288](https://cve.now/CVE-2016-1288.md): The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devices allows remote… (no CVSS)
- [CVE-2016-1356](https://cve.now/CVE-2016-1356.md): Cisco FireSIGHT System Software 6.1.0 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote… (no CVSS)
- [CVE-2016-1357](https://cve.now/CVE-2016-1357.md): The password-management administration component in Cisco Policy Suite (CPS) 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.4-att, and 7.5.0… (no CVSS)
- [CVE-2016-1358](https://cve.now/CVE-2016-1358.md): Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a denial of service… (no CVSS)
- [CVE-2016-1359](https://cve.now/CVE-2016-1359.md): Cisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP request that is mishandled… (no CVSS)
- [CVE-2016-2842](https://cve.now/CVE-2016-2842.md): The doapr\_outch function in crypto/bio/b\_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain… (no CVSS)
- [CVE-2016-1354](https://cve.now/CVE-2016-1354.md): Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to… (no CVSS)
- [CVE-2016-1355](https://cve.now/CVE-2016-1355.md): Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0… (no CVSS)
- [CVE-2016-1329](https://cve.now/CVE-2016-1329.md): Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500… (no CVSS)
- [CVE-2016-0702](https://cve.now/CVE-2016-0702.md): The MOD\_EXP\_CTIME\_COPY\_FROM\_PREBUF function in crypto/bn/bn\_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly… (no CVSS)
- [CVE-2016-0705](https://cve.now/CVE-2016-0705.md): Double free vulnerability in the dsa\_priv\_decode function in crypto/dsa/dsa\_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g… (no CVSS)
- [CVE-2016-0797](https://cve.now/CVE-2016-0797.md): Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service… (no CVSS)
- [CVE-2016-0798](https://cve.now/CVE-2016-0798.md): Memory leak in the SRP\_VBASE\_get\_by\_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to… (no CVSS)
- [CVE-2016-0799](https://cve.now/CVE-2016-0799.md): The fmtstr function in crypto/bio/b\_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-03-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.