# CVEs published 2016-01-09

16 CVEs were published on January 9, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6933](https://cve.now/CVE-2015-6933.md): The VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1.2, VMware Player 7.x before 7.1.2, VMware F (no CVSS)
- [CVE-2015-7085](https://cve.now/CVE-2015-7085.md): Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2015-7086](https://cve.now/CVE-2015-7086.md): Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2015-7087](https://cve.now/CVE-2015-7087.md): Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2015-7088](https://cve.now/CVE-2015-7088.md): Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2015-7089](https://cve.now/CVE-2015-7089.md): Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2015-7090](https://cve.now/CVE-2015-7090.md): Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2015-7091](https://cve.now/CVE-2015-7091.md): Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2015-7092](https://cve.now/CVE-2015-7092.md): Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and (no CVSS)
- [CVE-2015-7117](https://cve.now/CVE-2015-7117.md): Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2015-7575](https://cve.now/CVE-2015-7575.md): Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not (no CVSS)
- [CVE-2015-7938](https://cve.now/CVE-2015-7938.md): Advantech EKI-132x devices with firmware before 2015-12-31 allow remote attackers to bypass authentication via unspecified vectors. (no CVSS)
- [CVE-2015-7939](https://cve.now/CVE-2015-7939.md): Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp f (no CVSS)
- [CVE-2015-8510](https://cve.now/CVE-2015-8510.md): Cross-site scripting (XSS) vulnerability in the internationalization feature in the default homescreen app in Mozilla Firefox OS before 2.5 (no CVSS)
- [CVE-2015-8511](https://cve.now/CVE-2015-8511.md): Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passco (no CVSS)
- [CVE-2015-8512](https://cve.now/CVE-2015-8512.md): The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-01-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.