# CVEs published 2016-06-19

37 CVEs were published on June 19, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-7462](https://cve.now/CVE-2015-7462.md): IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output… (no CVSS)
- [CVE-2015-7776](https://cve.now/CVE-2015-7776.md): Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to… (no CVSS)
- [CVE-2016-0392](https://cve.now/CVE-2016-0392.md): IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x… (no CVSS)
- [CVE-2016-0911](https://cve.now/CVE-2016-0911.md): EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no\_root\_squash option for NFS exports, which makes it easier for remote… (no CVSS)
- [CVE-2016-0912](https://cve.now/CVE-2016-0912.md): EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by… (no CVSS)
- [CVE-2016-1191](https://cve.now/CVE-2016-1191.md): Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify… (no CVSS)
- [CVE-2016-1192](https://cve.now/CVE-2016-1192.md): Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read… (no CVSS)
- [CVE-2016-1196](https://cve.now/CVE-2016-1196.md): Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive… (no CVSS)
- [CVE-2016-1860](https://cve.now/CVE-2016-1860.md): Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted… (no CVSS)
- [CVE-2016-1861](https://cve.now/CVE-2016-1861.md): The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or… (no CVSS)
- [CVE-2016-1862](https://cve.now/CVE-2016-1862.md): Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted… (no CVSS)
- [CVE-2016-1864](https://cve.now/CVE-2016-1864.md): The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which… (no CVSS)
- [CVE-2016-4514](https://cve.now/CVE-2016-4514.md): Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a… (no CVSS)
- [CVE-2016-4518](https://cve.now/CVE-2016-4518.md): OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message. (no CVSS)
- [CVE-2016-4530](https://cve.now/CVE-2016-4530.md): OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to cause a denial of service (service outage and… (no CVSS)
- [CVE-2016-4811](https://cve.now/CVE-2016-4811.md): The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows… (no CVSS)
- [CVE-2015-7775](https://cve.now/CVE-2015-7775.md): Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2016-1195](https://cve.now/CVE-2016-1195.md): Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and… (no CVSS)
- [CVE-2016-1197](https://cve.now/CVE-2016-1197.md): Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2016-1225](https://cve.now/CVE-2016-1225.md): Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors. (no CVSS)
- [CVE-2016-1226](https://cve.now/CVE-2016-1226.md): Cross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2016-1183](https://cve.now/CVE-2016-1183.md): NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and… (no CVSS)
- [CVE-2016-1223](https://cve.now/CVE-2016-1223.md): Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business… (no CVSS)
- [CVE-2016-1224](https://cve.now/CVE-2016-1224.md): CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote… (no CVSS)
- [CVE-2016-1395](https://cve.now/CVE-2016-1395.md): The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and… (no CVSS)
- [CVE-2016-1396](https://cve.now/CVE-2016-1396.md): Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7… (no CVSS)
- [CVE-2016-1397](https://cve.now/CVE-2016-1397.md): Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware… (no CVSS)
- [CVE-2016-1424](https://cve.now/CVE-2016-1424.md): Cisco IOS 15.2(1)T1.11 and 15.2(2)TST allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka… (no CVSS)
- [CVE-2016-4371](https://cve.now/CVE-2016-4371.md): HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive… (no CVSS)
- [CVE-2016-4813](https://cve.now/CVE-2016-4813.md): NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users to gain privileges by creating a SYSTEM\_ADMIN… (no CVSS)
- [CVE-2016-4814](https://cve.now/CVE-2016-4814.md): Directory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan (aka GSI) Old\_GSI\_Maps before January 2015… (no CVSS)
- [CVE-2016-4815](https://cve.now/CVE-2016-4815.md): Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16… (no CVSS)
- [CVE-2016-4816](https://cve.now/CVE-2016-4816.md): BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and… (no CVSS)
- [CVE-2016-4817](https://cve.now/CVE-2016-4817.md): lib/http2/connection.c in H2O before 1.7.3 and 2.x before 2.0.0-beta5 mishandles HTTP/2 disconnection, which allows remote attackers to… (no CVSS)
- [CVE-2016-4819](https://cve.now/CVE-2016-4819.md): The printfDx function in Takumi Yamada DX Library for Borland C++ 3.13f through 3.16b, DX Library for Gnu C++ 3.13f through 3.16b, and DX… (no CVSS)
- [CVE-2016-4820](https://cve.now/CVE-2016-4820.md): Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of… (no CVSS)
- [CVE-2016-4821](https://cve.now/CVE-2016-4821.md): I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service (web-server crash) via unspecified vectors. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-06-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.