# CVEs published 2016-02-01

21 CVEs were published on February 1, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-8265](https://cve.now/CVE-2015-8265.md): Huawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 routers with software before V200R001B31 (no CVSS)
- [CVE-2015-8781](https://cve.now/CVE-2015-8781.md): tif\_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a Log (no CVSS)
- [CVE-2015-8782](https://cve.now/CVE-2015-8782.md): tif\_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerabilit (no CVSS)
- [CVE-2015-8783](https://cve.now/CVE-2015-8783.md): tif\_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image. (no CVSS)
- [CVE-2016-2049](https://cve.now/CVE-2016-2049.md): examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER\_ (no CVSS)
- [CVE-2016-2199](https://cve.now/CVE-2016-2199.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McA (no CVSS)
- [CVE-2016-1716](https://cve.now/CVE-2016-1716.md): AppleGraphicsPowerManagement in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corrupt (no CVSS)
- [CVE-2016-1717](https://cve.now/CVE-2016-1717.md): The Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cau (no CVSS)
- [CVE-2016-1718](https://cve.now/CVE-2016-1718.md): The IOAcceleratorFamily2 interface in IOAcceleratorFamily in Apple OS X before 10.11.3 allows local users to gain privileges or cause a deni (no CVSS)
- [CVE-2016-1719](https://cve.now/CVE-2016-1719.md): The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a d (no CVSS)
- [CVE-2016-1720](https://cve.now/CVE-2016-1720.md): IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of servi (no CVSS)
- [CVE-2016-1721](https://cve.now/CVE-2016-1721.md): The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of (no CVSS)
- [CVE-2016-1722](https://cve.now/CVE-2016-1722.md): syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of serv (no CVSS)
- [CVE-2016-1723](https://cve.now/CVE-2016-1723.md): WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2016-1724](https://cve.now/CVE-2016-1724.md): WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or (no CVSS)
- [CVE-2016-1725](https://cve.now/CVE-2016-1725.md): WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2016-1726](https://cve.now/CVE-2016-1726.md): WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS)
- [CVE-2016-1727](https://cve.now/CVE-2016-1727.md): WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or (no CVSS)
- [CVE-2016-1728](https://cve.now/CVE-2016-1728.md): The Cascading Style Sheets (CSS) implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector (no CVSS)
- [CVE-2016-1729](https://cve.now/CVE-2016-1729.md): Untrusted search path vulnerability in OSA Scripts in Apple OS X before 10.11.3 allows attackers to load arbitrary script libraries via a qu (no CVSS)
- [CVE-2016-1730](https://cve.now/CVE-2016-1730.md): WebSheet in Apple iOS before 9.2.1 allows remote attackers to read or write to cookies by operating a crafted captive portal. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-02-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.