# CVEs published 2016-06-29

18 CVEs were published on June 29, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2012-6703](https://cve.now/CVE-2012-6703.md): Integer overflow in the snd\_compr\_allocate\_buffer function in sound/core/compress\_offload.c in the ALSA subsystem in the Linux kernel… (no CVSS)
- [CVE-2016-1237](https://cve.now/CVE-2016-1237.md): nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related… (no CVSS)
- [CVE-2016-5101](https://cve.now/CVE-2016-5101.md): Unspecified vulnerability in Opera Mail before 2016-02-16 on Windows allows user-assisted remote attackers to execute arbitrary code via a… (no CVSS)
- [CVE-2016-5832](https://cve.now/CVE-2016-5832.md): The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors. (no CVSS)
- [CVE-2016-5833](https://cve.now/CVE-2016-5833.md): Cross-site scripting (XSS) vulnerability in the column\_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress… (no CVSS)
- [CVE-2016-5834](https://cve.now/CVE-2016-5834.md): Cross-site scripting (XSS) vulnerability in the wp\_get\_attachment\_link function in wp-includes/post-template.php in WordPress before 4.5.3… (no CVSS)
- [CVE-2016-5835](https://cve.now/CVE-2016-5835.md): WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post… (no CVSS)
- [CVE-2016-5836](https://cve.now/CVE-2016-5836.md): The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors. (no CVSS)
- [CVE-2016-5837](https://cve.now/CVE-2016-5837.md): WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via… (no CVSS)
- [CVE-2016-5838](https://cve.now/CVE-2016-5838.md): WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie. (no CVSS)
- [CVE-2016-5839](https://cve.now/CVE-2016-5839.md): WordPress before 4.5.3 allows remote attackers to bypass the sanitize\_file\_name protection mechanism via unspecified vectors. (no CVSS)
- [CVE-2015-8698](https://cve.now/CVE-2015-8698.md): CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and… (no CVSS)
- [CVE-2015-8699](https://cve.now/CVE-2015-8699.md): Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227… (no CVSS)
- [CVE-2016-0260](https://cve.now/CVE-2016-0260.md): Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap… (no CVSS)
- [CVE-2016-0263](https://cve.now/CVE-2016-0263.md): IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to… (no CVSS)
- [CVE-2016-0267](https://cve.now/CVE-2016-0267.md): IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain… (no CVSS)
- [CVE-2016-0298](https://cve.now/CVE-2016-0298.md): Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users… (no CVSS)
- [CVE-2016-0304](https://cve.now/CVE-2016-0304.md): The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-06-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.