# CVEs published 2016-03-03 19 CVEs were published on March 3, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2015-0718](https://cve.now/CVE-2015-0718.md): Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remo (no CVSS) - [CVE-2015-6260](https://cve.now/CVE-2015-6260.md): Cisco NX-OS 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in SNMP packets, which allows remote attackers (no CVSS) - [CVE-2015-7490](https://cve.now/CVE-2015-7490.md): IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authe (no CVSS) - [CVE-2016-0227](https://cve.now/CVE-2016-0227.md): Cross-site scripting (XSS) vulnerability in the document-list control implementation in IBM Business Process Manager (BPM) 8.0 through 8.0.1 (no CVSS) - [CVE-2016-1158](https://cve.now/CVE-2016-1158.md): Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers to hijack the authenti (no CVSS) - [CVE-2016-1288](https://cve.now/CVE-2016-1288.md): The HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web Security Appliance (WSA) devices allows remote att (no CVSS) - [CVE-2016-1356](https://cve.now/CVE-2016-1356.md): Cisco FireSIGHT System Software 6.1.0 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote att (no CVSS) - [CVE-2016-1357](https://cve.now/CVE-2016-1357.md): The password-management administration component in Cisco Policy Suite (CPS) 7.0.1.3, 7.0.2, 7.0.2-att, 7.0.3-att, 7.0.4-att, and 7.5.0 allo (no CVSS) - [CVE-2016-1358](https://cve.now/CVE-2016-1358.md): Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a denial of service via (no CVSS) - [CVE-2016-1359](https://cve.now/CVE-2016-1359.md): Cisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP request that is mishandled dur (no CVSS) - [CVE-2016-2842](https://cve.now/CVE-2016-2842.md): The doapr\_outch function in crypto/bio/b\_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memor (no CVSS) - [CVE-2016-1354](https://cve.now/CVE-2016-1354.md): Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8.x before 8.1.1 allows remote attackers to i (no CVSS) - [CVE-2016-1355](https://cve.now/CVE-2016-1355.md): Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 al (no CVSS) - [CVE-2016-1329](https://cve.now/CVE-2016-1329.md): Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices (no CVSS) - [CVE-2016-0702](https://cve.now/CVE-2016-0702.md): The MOD\_EXP\_CTIME\_COPY\_FROM\_PREBUF function in crypto/bn/bn\_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly c (no CVSS) - [CVE-2016-0705](https://cve.now/CVE-2016-0705.md): Double free vulnerability in the dsa\_priv\_decode function in crypto/dsa/dsa\_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g a (no CVSS) - [CVE-2016-0797](https://cve.now/CVE-2016-0797.md): Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap (no CVSS) - [CVE-2016-0798](https://cve.now/CVE-2016-0798.md): Memory leak in the SRP\_VBASE\_get\_by\_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to ca (no CVSS) - [CVE-2016-0799](https://cve.now/CVE-2016-0799.md): The fmtstr function in crypto/bio/b\_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, whi (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-03-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.