# CVEs published 2016-01-16

7 CVEs were published on January 16, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6863](https://cve.now/CVE-2015-6863.md): HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the (1) Intellicus or (2) client (no CVSS)
- [CVE-2015-6864](https://cve.now/CVE-2015-6864.md): HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the (1) Intellicus or (no CVSS)
- [CVE-2016-1133](https://cve.now/CVE-2016-1133.md): CRLF injection vulnerability in the on\_req function in lib/handler/redirect.c in H2O before 1.6.2 and 1.7.x before 1.7.0-beta3 allows remote (no CVSS)
- [CVE-2016-1142](https://cve.now/CVE-2016-1142.md): Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified (no CVSS)
- [CVE-2016-1293](https://cve.now/CVE-2016-1293.md): Multiple cross-site scripting (XSS) vulnerabilities in the Management Center in Cisco FireSIGHT System Software 6.0.0 and 6.0.1 allow remote (no CVSS)
- [CVE-2016-1294](https://cve.now/CVE-2016-1294.md): Cross-site scripting (XSS) vulnerability in the Management Center in Cisco FireSIGHT System Software 6.0.1 allows remote attackers to inject (no CVSS)
- [CVE-2016-1295](https://cve.now/CVE-2016-1295.md): Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authenticatio (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-01-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.