# CVEs published 2016-12-31

6 CVEs were published on December 31, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-9941](https://cve.now/CVE-2016-9941.md): Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service… (no CVSS)
- [CVE-2016-9942](https://cve.now/CVE-2016-9942.md): Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote servers to cause a denial of service… (no CVSS)
- [CVE-2016-6856](https://cve.now/CVE-2016-6856.md): Cross-site scripting (XSS) vulnerability in the Inbox Search feature in Hybris Management Console (HMC) in SAP Hybris before 6.0 allows… (no CVSS)
- [CVE-2016-6857](https://cve.now/CVE-2016-6857.md): Cross-site scripting (XSS) vulnerability in the Create Catalogue feature in Hybris Management Console (HMC) in SAP Hybris before 5.2.0.13… (no CVSS)
- [CVE-2016-6858](https://cve.now/CVE-2016-6858.md): Cross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management Console (HMC) in SAP Hybris before 5.0.4.11… (no CVSS)
- [CVE-2016-6859](https://cve.now/CVE-2016-6859.md): Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-12-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.