# CVEs published 2016-01-29 19 CVEs were published on January 29, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2015-7521](https://cve.now/CVE-2015-7521.md): The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthor (no CVSS, org.apache.hive:hive ยท org.apache.hive:hive-exec +1) - [CVE-2015-8772](https://cve.now/CVE-2015-8772.md): McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memo (no CVSS) - [CVE-2015-8773](https://cve.now/CVE-2015-8773.md): Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial o (no CVSS) - [CVE-2016-0737](https://cve.now/CVE-2016-0737.md): OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of (no CVSS, swift) - [CVE-2016-0738](https://cve.now/CVE-2016-0738.md): OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, whic (no CVSS, swift) - [CVE-2016-0754](https://cve.now/CVE-2016-0754.md): cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a different drive via a colon (no CVSS) - [CVE-2016-0755](https://cve.now/CVE-2016-0755.md): The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which mig (no CVSS) - [CVE-2016-0756](https://cve.now/CVE-2016-0756.md): The generate\_dialback function in the mod\_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialbac (no CVSS) - [CVE-2016-1493](https://cve.now/CVE-2016-1493.md): Intel Driver Update Utility before 2.4 retrieves driver updates in cleartext, which makes it easier for man-in-the-middle attackers to execu (no CVSS) - [CVE-2015-8770](https://cve.now/CVE-2015-8770.md): Directory traversal vulnerability in the set\_skin function in program/include/rcmail\_output\_html.php in Roundcube before 1.0.8 and 1.1.x bef (no CVSS) - [CVE-2015-8789](https://cve.now/CVE-2015-8789.md): Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified (no CVSS) - [CVE-2015-8790](https://cve.now/CVE-2015-8790.md): The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information fr (no CVSS) - [CVE-2015-8791](https://cve.now/CVE-2015-8791.md): The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensitive information from (no CVSS) - [CVE-2015-8792](https://cve.now/CVE-2015-8792.md): The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from (no CVSS) - [CVE-2015-8793](https://cve.now/CVE-2015-8793.md): Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attack (no CVSS) - [CVE-2015-8794](https://cve.now/CVE-2015-8794.md): Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote (no CVSS) - [CVE-2016-1879](https://cve.now/CVE-2016-1879.md): The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is co (no CVSS) - [CVE-2016-1882](https://cve.now/CVE-2016-1882.md): FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service (kernel crash) via vectors r (no CVSS) - [CVE-2015-7464](https://cve.now/CVE-2015-7464.md): Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows re (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-01-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.