# CVEs published 2016-01-27

15 CVEs were published on January 27, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6319](https://cve.now/CVE-2015-6319.md): SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2015-6421](https://cve.now/CVE-2015-6421.md): cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3 (no CVSS)
- [CVE-2016-1299](https://cve.now/CVE-2016-1299.md): The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HT (no CVSS)
- [CVE-2016-1300](https://cve.now/CVE-2016-1300.md): Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2015-8618](https://cve.now/CVE-2015-8618.md): The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, whi (no CVSS, stdlib)
- [CVE-2016-1923](https://cve.now/CVE-2016-1923.md): Heap-based buffer overflow in the opj\_j2k\_update\_image\_data function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2016-1924](https://cve.now/CVE-2016-1924.md): The opj\_tgt\_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds read and application cr (no CVSS)
- [CVE-2016-1982](https://cve.now/CVE-2016-1982.md): The remove\_chunked\_transfer\_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (inva (no CVSS)
- [CVE-2016-1983](https://cve.now/CVE-2016-1983.md): The client\_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invalid read and crash) (no CVSS)
- [CVE-2016-2047](https://cve.now/CVE-2016-2047.md): The ssl\_verify\_server\_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracl (no CVSS)
- [CVE-2015-7439](https://cve.now/CVE-2015-7439.md): Cross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in IBM Rational Software Architect 8.5 through 9 (no CVSS)
- [CVE-2015-7487](https://cve.now/CVE-2015-7487.md): IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7. (no CVSS)
- [CVE-2015-7488](https://cve.now/CVE-2015-7488.md): IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to (no CVSS)
- [CVE-2016-0209](https://cve.now/CVE-2016-0209.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2016-1896](https://cve.now/CVE-2016-1896.md): Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.0 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-01-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.