# CVEs published 2016-01-05

10 CVEs were published on January 5, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-5434](https://cve.now/CVE-2015-5434.md): HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictio (no CVSS)
- [CVE-2015-5445](https://cve.now/CVE-2015-5445.md): Cross-site request forgery (CSRF) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hi (no CVSS)
- [CVE-2015-5446](https://cve.now/CVE-2015-5446.md): HP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2015-5447](https://cve.now/CVE-2015-5447.md): Cross-site scripting (XSS) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject ar (no CVSS)
- [CVE-2015-6858](https://cve.now/CVE-2015-6858.md): HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors (no CVSS)
- [CVE-2015-6859](https://cve.now/CVE-2015-6859.md): HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a d (no CVSS)
- [CVE-2015-6860](https://cve.now/CVE-2015-6860.md): HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a d (no CVSS)
- [CVE-2015-6861](https://cve.now/CVE-2015-6861.md): HPE Helion Eucalyptus 3.4.0 through 4.2.0 allows remote authenticated users to bypass an intended AssumeRole permission requirement and assu (no CVSS)
- [CVE-2014-5040](https://cve.now/CVE-2014-5040.md): HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended acc (no CVSS)
- [CVE-2015-6432](https://cve.now/CVE-2015-6432.md): Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Ele (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-01-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.