# CVEs published 2016-03-12

49 CVEs were published on March 12, 2016: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2016-0815](https://cve.now/CVE-2016-0815.md): The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1. (no CVSS)
- [CVE-2016-0816](https://cve.now/CVE-2016-0816.md): mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupti (no CVSS)
- [CVE-2016-0818](https://cve.now/CVE-2016-0818.md): The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 (no CVSS)
- [CVE-2016-0819](https://cve.now/CVE-2016-0819.md): The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to gain (no CVSS)
- [CVE-2016-0820](https://cve.now/CVE-2016-0820.md): The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka inter (no CVSS)
- [CVE-2016-0821](https://cve.now/CVE-2016-0821.md): The LIST\_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not prope (no CVSS)
- [CVE-2016-0822](https://cve.now/CVE-2016-0822.md): The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application tha (no CVSS)
- [CVE-2016-0823](https://cve.now/CVE-2016-0823.md): The pagemap\_open function in fs/proc/task\_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local (no CVSS)
- [CVE-2016-0824](https://cve.now/CVE-2016-0824.md): libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an uns (no CVSS)
- [CVE-2016-0825](https://cve.now/CVE-2016-0825.md): The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage informatio (no CVSS)
- [CVE-2016-0826](https://cve.now/CVE-2016-0826.md): libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the (no CVSS)
- [CVE-2016-0827](https://cve.now/CVE-2016-0827.md): Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allo (no CVSS)
- [CVE-2016-0828](https://cve.now/CVE-2016-0828.md): The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H an (no CVSS)
- [CVE-2016-0829](https://cve.now/CVE-2016-0829.md): The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x befo (no CVSS)
- [CVE-2016-0830](https://cve.now/CVE-2016-0830.md): btif\_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and pers (no CVSS)
- [CVE-2016-0831](https://cve.now/CVE-2016-0831.md): The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x b (no CVSS)
- [CVE-2016-0832](https://cve.now/CVE-2016-0832.md): Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset Prot (no CVSS)
- [CVE-2016-1621](https://cve.now/CVE-2016-1621.md): libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arb (no CVSS)
- [CVE-2015-7446](https://cve.now/CVE-2015-7446.md): Cross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, and 7.6 before 7.6.0.4 all (no CVSS)
- [CVE-2015-7448](https://cve.now/CVE-2015-7448.md): SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX (no CVSS)
- [CVE-2016-0960](https://cve.now/CVE-2016-0960.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR (no CVSS)
- [CVE-2016-0961](https://cve.now/CVE-2016-0961.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR (no CVSS)
- [CVE-2016-0962](https://cve.now/CVE-2016-0962.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR (no CVSS)
- [CVE-2016-0963](https://cve.now/CVE-2016-0963.md): Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 (no CVSS)
- [CVE-2016-0986](https://cve.now/CVE-2016-0986.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR (no CVSS)
- [CVE-2016-0987](https://cve.now/CVE-2016-0987.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before (no CVSS)
- [CVE-2016-0988](https://cve.now/CVE-2016-0988.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before (no CVSS)
- [CVE-2016-0989](https://cve.now/CVE-2016-0989.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR (no CVSS)
- [CVE-2016-0990](https://cve.now/CVE-2016-0990.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before (no CVSS)
- [CVE-2016-0991](https://cve.now/CVE-2016-0991.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before (no CVSS)
- [CVE-2016-0992](https://cve.now/CVE-2016-0992.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR (no CVSS)
- [CVE-2016-0993](https://cve.now/CVE-2016-0993.md): Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 (no CVSS)
- [CVE-2016-0994](https://cve.now/CVE-2016-0994.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before (no CVSS)
- [CVE-2016-0995](https://cve.now/CVE-2016-0995.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before (no CVSS)
- [CVE-2016-0996](https://cve.now/CVE-2016-0996.md): Use-after-free vulnerability in the setInterval method in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Wi (no CVSS)
- [CVE-2016-0997](https://cve.now/CVE-2016-0997.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before (no CVSS)
- [CVE-2016-0998](https://cve.now/CVE-2016-0998.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before (no CVSS)
- [CVE-2016-0999](https://cve.now/CVE-2016-0999.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before (no CVSS)
- [CVE-2016-1000](https://cve.now/CVE-2016-1000.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before (no CVSS)
- [CVE-2016-1001](https://cve.now/CVE-2016-1001.md): Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11 (no CVSS)
- [CVE-2016-1002](https://cve.now/CVE-2016-1002.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR (no CVSS)
- [CVE-2016-1005](https://cve.now/CVE-2016-1005.md): Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR (no CVSS)
- [CVE-2016-1010](https://cve.now/CVE-2016-1010.md): Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 (CVSS 8.8, KEV)
- [CVE-2015-6485](https://cve.now/CVE-2015-6485.md): Schneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2, Sage 1410, Sage 1430, Sage 1450, Sage 2400, a (no CVSS)
- [CVE-2015-7411](https://cve.now/CVE-2015-7411.md): The portal client in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 through FP6 allows remote authenticated use (no CVSS)
- [CVE-2016-1338](https://cve.now/CVE-2016-1338.md): Cisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service (VoIP o (no CVSS)
- [CVE-2016-1360](https://cve.now/CVE-2016-1360.md): Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations, whi (no CVSS)
- [CVE-2016-1361](https://cve.now/CVE-2016-1361.md): Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BF (no CVSS)
- [CVE-2016-1562](https://cve.now/CVE-2016-1562.md): The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified customer (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-03-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.