# CVEs published 2016-01-22

15 CVEs were published on January 22, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6013](https://cve.now/CVE-2015-6013.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local use (no CVSS)
- [CVE-2015-6014](https://cve.now/CVE-2015-6014.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local use (no CVSS)
- [CVE-2015-6015](https://cve.now/CVE-2015-6015.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local use (no CVSS)
- [CVE-2015-6925](https://cve.now/CVE-2015-6925.md): wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) (no CVSS)
- [CVE-2015-7744](https://cve.now/CVE-2015-7744.md): wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allo (no CVSS)
- [CVE-2016-1570](https://cve.now/CVE-2016-1570.md): The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive info (no CVSS)
- [CVE-2016-1571](https://cve.now/CVE-2016-1571.md): The paging\_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is (no CVSS)
- [CVE-2016-1572](https://cve.now/CVE-2016-1572.md): mount.ecryptfs\_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges (no CVSS)
- [CVE-2015-6412](https://cve.now/CVE-2015-6412.md): Cisco Modular Encoding Platform D9036 Software before 02.04.70 has hardcoded (1) root and (2) guest passwords, which makes it easier for rem (no CVSS)
- [CVE-2015-6435](https://cve.now/CVE-2015-6435.md): An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2( (no CVSS)
- [CVE-2015-7909](https://cve.now/CVE-2015-7909.md): Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13 (no CVSS)
- [CVE-2015-8362](https://cve.now/CVE-2015-8362.md): The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the BlackWidow account, (no CVSS)
- [CVE-2016-1134](https://cve.now/CVE-2016-1134.md): Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1 (no CVSS)
- [CVE-2016-1135](https://cve.now/CVE-2016-1135.md): Cross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and (no CVSS)
- [CVE-2016-1984](https://cve.now/CVE-2016-1984.md): The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 has a hardcoded password for the 1MB@tMaN account, wh (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-01-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.