# CVEs published 2016-01-03

16 CVEs were published on January 3, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-4946](https://cve.now/CVE-2015-4946.md): Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4. (no CVSS)
- [CVE-2015-4962](https://cve.now/CVE-2015-4962.md): Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 (no CVSS)
- [CVE-2015-5003](https://cve.now/CVE-2015-5003.md): The portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before FP7 allows remote authenticated users to ex (no CVSS)
- [CVE-2015-5017](https://cve.now/CVE-2015-5017.md): IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7. (no CVSS)
- [CVE-2015-5023](https://cve.now/CVE-2015-5023.md): SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary S (no CVSS)
- [CVE-2015-5035](https://cve.now/CVE-2015-5035.md): Cross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allow (no CVSS)
- [CVE-2015-5036](https://cve.now/CVE-2015-5036.md): Cross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allow (no CVSS)
- [CVE-2015-5037](https://cve.now/CVE-2015-5037.md): Cross-site request forgery (CSRF) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR (no CVSS)
- [CVE-2015-5038](https://cve.now/CVE-2015-5038.md): IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 does not properly detect recursion during XML ent (no CVSS)
- [CVE-2015-5051](https://cve.now/CVE-2015-5051.md): IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and (no CVSS)
- [CVE-2015-8508](https://cve.now/CVE-2015-8508.md): Cross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4. (no CVSS)
- [CVE-2015-8509](https://cve.now/CVE-2015-8509.md): Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly c (no CVSS)
- [CVE-2015-1971](https://cve.now/CVE-2015-1971.md): Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before (no CVSS)
- [CVE-2015-1985](https://cve.now/CVE-2015-1985.md): The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private k (no CVSS)
- [CVE-2015-2007](https://cve.now/CVE-2015-2007.md): Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.5 Patch 6 allows remote authenticated users to read arbitrary (no CVSS)
- [CVE-2016-1283](https://cve.now/CVE-2016-1283.md): The pcre\_compile2 function in pcre\_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\\"){99}-))(?J)(?'R'(?'R'\<((?'RR'(?'R'\\){97)?J)?J (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-01-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.