# CVEs published 2016-11-03 22 CVEs were published on November 3, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2016-6429](https://cve.now/CVE-2016-6429.md): A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an… (no CVSS, Cisco IP Interoperability and Collaboration System) - [CVE-2016-6430](https://cve.now/CVE-2016-6430.md): A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an… (no CVSS, Cisco IP Interoperability and Collaboration System before) - [CVE-2016-6441](https://cve.now/CVE-2016-6441.md): A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker… (no CVSS, Cisco IOS XE 3.17 and) - [CVE-2016-6447](https://cve.now/CVE-2016-6447.md): A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an… (no CVSS, Cisco Meeting Server before 2.0.1, Acano Server before 1.9.…) - [CVE-2016-6448](https://cve.now/CVE-2016-6448.md): A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker… (no CVSS, Cisco Meeting Server before 2.0.3 and Acano Server before) - [CVE-2016-6451](https://cve.now/CVE-2016-6451.md): Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote… (no CVSS, Cisco Prime Collaboration Provisioning) - [CVE-2016-6452](https://cve.now/CVE-2016-6452.md): A vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow an unauthenticated, remote attacker to… (no CVSS, Cisco Prime Home before) - [CVE-2016-6453](https://cve.now/CVE-2016-6453.md): A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute… (no CVSS, Cisco Identity Services Engine) - [CVE-2016-6454](https://cve.now/CVE-2016-6454.md): A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application… (no CVSS, Cisco Hosted Collaboration Mediation Fulfillment before) - [CVE-2016-6455](https://cve.now/CVE-2016-6455.md): A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2) could allow an… (no CVSS, Cisco StarOS 18.x through 21.x) - [CVE-2015-8968](https://cve.now/CVE-2015-8968.md): git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. (no CVSS, git-fastclone ruby gem All versions before · git-fastclone) - [CVE-2015-8969](https://cve.now/CVE-2015-8969.md): git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. (no CVSS, git-fastclone ruby gem All versions before · git-fastclone) - [CVE-2016-4025](https://cve.now/CVE-2016-4025.md): Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint… (no CVSS) - [CVE-2016-7095](https://cve.now/CVE-2016-7095.md): Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an… (no CVSS) - [CVE-2016-7160](https://cve.now/CVE-2016-7160.md): A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not properly restricted, leading… (no CVSS) - [CVE-2016-7402](https://cve.now/CVE-2016-7402.md): SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system… (no CVSS) - [CVE-2016-7452](https://cve.now/CVE-2016-7452.md): The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a… (no CVSS) - [CVE-2016-7453](https://cve.now/CVE-2016-7453.md): The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection. (no CVSS) - [CVE-2016-9086](https://cve.now/CVE-2016-9086.md): GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. (no CVSS) - [CVE-2016-9134](https://cve.now/CVE-2016-9134.md): Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting the order parameter. (no CVSS) - [CVE-2016-9135](https://cve.now/CVE-2016-9135.md): Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the… (no CVSS) - [CVE-2016-9136](https://cve.now/CVE-2016-9136.md): Artifex Software, Inc. (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2016-11-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.