# CVEs published 2016-02-03

12 CVEs were published on February 3, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-5344](https://cve.now/CVE-2015-5344.md): The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via (no CVSS, org.apache.camel:camel-xstream)
- [CVE-2015-7536](https://cve.now/CVE-2015-7536.md): Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrar (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2015-7537](https://cve.now/CVE-2015-7537.md): Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authent (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2015-7538](https://cve.now/CVE-2015-7538.md): Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors. (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2015-7539](https://cve.now/CVE-2015-7539.md): The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2015-7546](https://cve.now/CVE-2015-7546.md): The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (former (no CVSS, keystone · keystonemiddleware)
- [CVE-2015-8747](https://cve.now/CVE-2015-8747.md): The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted compone (no CVSS, radicale)
- [CVE-2015-8748](https://cve.now/CVE-2015-8748.md): Radicale before 1.1 allows remote authenticated users to bypass owner\_write and owner\_only limitations via regex metacharacters in the user (no CVSS, radicale)
- [CVE-2016-1505](https://cve.now/CVE-2016-1505.md): The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted p (no CVSS, radicale)
- [CVE-2016-1905](https://cve.now/CVE-2016-1905.md): The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resourc (no CVSS, github.com/kubernetes/kubernetes)
- [CVE-2016-1906](https://cve.now/CVE-2016-1906.md): Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that (no CVSS, github.com/openshift/origin)
- [CVE-2016-2213](https://cve.now/CVE-2016-2213.md): The jpeg2000\_decode\_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service (o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.