# CVEs published 2016-03-12

49 CVEs were published on March 12, 2016: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2016-0815](https://cve.now/CVE-2016-0815.md): The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before… (no CVSS)
- [CVE-2016-0816](https://cve.now/CVE-2016-0816.md): mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory… (no CVSS)
- [CVE-2016-0818](https://cve.now/CVE-2016-0818.md): The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before… (no CVSS)
- [CVE-2016-0819](https://cve.now/CVE-2016-0819.md): The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to… (no CVSS)
- [CVE-2016-0820](https://cve.now/CVE-2016-0820.md): The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka… (no CVSS)
- [CVE-2016-0821](https://cve.now/CVE-2016-0821.md): The LIST\_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not… (no CVSS)
- [CVE-2016-0822](https://cve.now/CVE-2016-0822.md): The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application… (no CVSS)
- [CVE-2016-0823](https://cve.now/CVE-2016-0823.md): The pagemap\_open function in fs/proc/task\_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows… (no CVSS)
- [CVE-2016-0824](https://cve.now/CVE-2016-0824.md): libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an… (no CVSS)
- [CVE-2016-0825](https://cve.now/CVE-2016-0825.md): The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage… (no CVSS)
- [CVE-2016-0826](https://cve.now/CVE-2016-0826.md): libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of… (no CVSS)
- [CVE-2016-0827](https://cve.now/CVE-2016-0827.md): Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01… (no CVSS)
- [CVE-2016-0828](https://cve.now/CVE-2016-0828.md): The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H… (no CVSS)
- [CVE-2016-0829](https://cve.now/CVE-2016-0829.md): The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x… (no CVSS)
- [CVE-2016-0830](https://cve.now/CVE-2016-0830.md): btif\_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and… (no CVSS)
- [CVE-2016-0831](https://cve.now/CVE-2016-0831.md): The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x… (no CVSS)
- [CVE-2016-0832](https://cve.now/CVE-2016-0832.md): Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset… (no CVSS)
- [CVE-2016-1621](https://cve.now/CVE-2016-1621.md): libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute… (no CVSS)
- [CVE-2015-7446](https://cve.now/CVE-2015-7446.md): Cross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, and 7.6 before 7.6.0.4… (no CVSS)
- [CVE-2015-7448](https://cve.now/CVE-2015-7448.md): SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3… (no CVSS)
- [CVE-2016-0960](https://cve.now/CVE-2016-0960.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… (no CVSS)
- [CVE-2016-0961](https://cve.now/CVE-2016-0961.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… (no CVSS)
- [CVE-2016-0962](https://cve.now/CVE-2016-0962.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… (no CVSS)
- [CVE-2016-0963](https://cve.now/CVE-2016-0963.md): Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before… (no CVSS)
- [CVE-2016-0986](https://cve.now/CVE-2016-0986.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… (no CVSS)
- [CVE-2016-0987](https://cve.now/CVE-2016-0987.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and… (no CVSS)
- [CVE-2016-0988](https://cve.now/CVE-2016-0988.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and… (no CVSS)
- [CVE-2016-0989](https://cve.now/CVE-2016-0989.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… (no CVSS)
- [CVE-2016-0990](https://cve.now/CVE-2016-0990.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and… (no CVSS)
- [CVE-2016-0991](https://cve.now/CVE-2016-0991.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and… (no CVSS)
- [CVE-2016-0992](https://cve.now/CVE-2016-0992.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… (no CVSS)
- [CVE-2016-0993](https://cve.now/CVE-2016-0993.md): Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before… (no CVSS)
- [CVE-2016-0994](https://cve.now/CVE-2016-0994.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and… (no CVSS)
- [CVE-2016-0995](https://cve.now/CVE-2016-0995.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and… (no CVSS)
- [CVE-2016-0996](https://cve.now/CVE-2016-0996.md): Use-after-free vulnerability in the setInterval method in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on… (no CVSS)
- [CVE-2016-0997](https://cve.now/CVE-2016-0997.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and… (no CVSS)
- [CVE-2016-0998](https://cve.now/CVE-2016-0998.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and… (no CVSS)
- [CVE-2016-0999](https://cve.now/CVE-2016-0999.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and… (no CVSS)
- [CVE-2016-1000](https://cve.now/CVE-2016-1000.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and… (no CVSS)
- [CVE-2016-1001](https://cve.now/CVE-2016-1001.md): Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before… (no CVSS)
- [CVE-2016-1002](https://cve.now/CVE-2016-1002.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… (no CVSS)
- [CVE-2016-1005](https://cve.now/CVE-2016-1005.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe… (no CVSS)
- [CVE-2016-1010](https://cve.now/CVE-2016-1010.md): Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 (CVSS 8.8, KEV)
- [CVE-2015-6485](https://cve.now/CVE-2015-6485.md): Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400… (no CVSS)
- [CVE-2015-7411](https://cve.now/CVE-2015-7411.md): The portal client in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 through FP6 allows remote authenticated… (no CVSS)
- [CVE-2016-1338](https://cve.now/CVE-2016-1338.md): Cisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service (VoIP… (no CVSS)
- [CVE-2016-1360](https://cve.now/CVE-2016-1360.md): Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations… (no CVSS)
- [CVE-2016-1361](https://cve.now/CVE-2016-1361.md): Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection… (no CVSS)
- [CVE-2016-1562](https://cve.now/CVE-2016-1562.md): The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-03-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.