# CVEs published 2016-03-24

62 CVEs were published on March 24, 2016: 0 critical, 1 high. Days are UTC.

- [CVE-2016-1347](https://cve.now/CVE-2016-1347.md): The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2016-1366](https://cve.now/CVE-2016-1366.md): The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000 devices use weak permissions for system file (no CVSS)
- [CVE-2016-0636](https://cve.now/CVE-2016-0636.md): Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availabil (no CVSS)
- [CVE-2009-2197](https://cve.now/CVE-2009-2197.md): Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafted context, leading to (no CVSS)
- [CVE-2015-6853](https://cve.now/CVE-2015-6853.md): The Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, R12.5 before CR (no CVSS)
- [CVE-2015-6854](https://cve.now/CVE-2015-6854.md): The non-Domino web agents in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3 CR13, R12.0J before SP3 CR1.2, and R12.5 (no CVSS)
- [CVE-2015-7551](https://cve.now/CVE-2015-7551.md): The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed i (no CVSS)
- [CVE-2016-1599](https://cve.now/CVE-2016-1599.md): Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to (no CVSS)
- [CVE-2016-1732](https://cve.now/CVE-2016-1732.md): AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (no CVSS)
- [CVE-2016-1733](https://cve.now/CVE-2016-1733.md): AppleRAID in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memo (no CVSS)
- [CVE-2016-1734](https://cve.now/CVE-2016-1734.md): AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arbitrary code in a priv (no CVSS)
- [CVE-2016-1735](https://cve.now/CVE-2016-1735.md): Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memo (no CVSS)
- [CVE-2016-1736](https://cve.now/CVE-2016-1736.md): Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memo (no CVSS)
- [CVE-2016-1737](https://cve.now/CVE-2016-1737.md): Carbon in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS)
- [CVE-2016-1738](https://cve.now/CVE-2016-1738.md): dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app. (no CVSS)
- [CVE-2016-1740](https://cve.now/CVE-2016-1740.md): FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2016-1741](https://cve.now/CVE-2016-1741.md): The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged (no CVSS)
- [CVE-2016-1743](https://cve.now/CVE-2016-1743.md): The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged c (no CVSS)
- [CVE-2016-1744](https://cve.now/CVE-2016-1744.md): The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged c (no CVSS)
- [CVE-2016-1745](https://cve.now/CVE-2016-1745.md): IOFireWireFamily in Apple OS X before 10.11.4 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vec (no CVSS)
- [CVE-2016-1746](https://cve.now/CVE-2016-1746.md): IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (mem (no CVSS)
- [CVE-2016-1747](https://cve.now/CVE-2016-1747.md): IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (mem (no CVSS)
- [CVE-2016-1748](https://cve.now/CVE-2016-1748.md): IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to obtain sensitive kerne (no CVSS)
- [CVE-2016-1749](https://cve.now/CVE-2016-1749.md): IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (me (no CVSS)
- [CVE-2016-1750](https://cve.now/CVE-2016-1750.md): Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows atta (no CVSS)
- [CVE-2016-1751](https://cve.now/CVE-2016-1751.md): The kernel in Apple iOS before 9.3, tvOS before 9.2, and watchOS before 2.2 does not properly restrict the execute permission, which allows (no CVSS)
- [CVE-2016-1752](https://cve.now/CVE-2016-1752.md): The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to cause a denial of servi (no CVSS)
- [CVE-2016-1753](https://cve.now/CVE-2016-1753.md): Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attacke (no CVSS)
- [CVE-2016-1754](https://cve.now/CVE-2016-1754.md): The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code (no CVSS)
- [CVE-2016-1755](https://cve.now/CVE-2016-1755.md): The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code (no CVSS)
- [CVE-2016-1756](https://cve.now/CVE-2016-1756.md): The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a den (no CVSS)
- [CVE-2016-1757](https://cve.now/CVE-2016-1757.md): Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged cont (no CVSS)
- [CVE-2016-1758](https://cve.now/CVE-2016-1758.md): The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial (no CVSS)
- [CVE-2016-1759](https://cve.now/CVE-2016-1759.md): The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (mem (no CVSS)
- [CVE-2016-1761](https://cve.now/CVE-2016-1761.md): libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a de (no CVSS)
- [CVE-2016-1762](https://cve.now/CVE-2016-1762.md): The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a cr (CVSS 8.1)
- [CVE-2016-1763](https://cve.now/CVE-2016-1763.md): Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authen (no CVSS)
- [CVE-2016-1764](https://cve.now/CVE-2016-1764.md): The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive inform (no CVSS)
- [CVE-2016-1765](https://cve.now/CVE-2016-1765.md): otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) (no CVSS)
- [CVE-2016-1766](https://cve.now/CVE-2016-1766.md): The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust (no CVSS)
- [CVE-2016-1767](https://cve.now/CVE-2016-1767.md): QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS)
- [CVE-2016-1768](https://cve.now/CVE-2016-1768.md): QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS)
- [CVE-2016-1769](https://cve.now/CVE-2016-1769.md): QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS)
- [CVE-2016-1770](https://cve.now/CVE-2016-1770.md): The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dial (no CVSS)
- [CVE-2016-1771](https://cve.now/CVE-2016-1771.md): The Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote attackers to cause a denial of service via a (no CVSS)
- [CVE-2016-1772](https://cve.now/CVE-2016-1772.md): The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via (no CVSS)
- [CVE-2016-1773](https://cve.now/CVE-2016-1773.md): The code-signing subsystem in Apple OS X before 10.11.4 does not properly verify file ownership, which allows local users to determine the e (no CVSS)
- [CVE-2016-1774](https://cve.now/CVE-2016-1774.md): The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions during a backup, wh (no CVSS)
- [CVE-2016-1775](https://cve.now/CVE-2016-1775.md): TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbi (no CVSS)
- [CVE-2016-1776](https://cve.now/CVE-2016-1776.md): Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS\_Store and .htaccess files, which allows remote attackers (no CVSS)
- [CVE-2016-1777](https://cve.now/CVE-2016-1777.md): Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to defeat cryptographic pr (no CVSS)
- [CVE-2016-1778](https://cve.now/CVE-2016-1778.md): WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory (no CVSS)
- [CVE-2016-1779](https://cve.now/CVE-2016-1779.md): WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtain physical-location d (no CVSS)
- [CVE-2016-1780](https://cve.now/CVE-2016-1780.md): WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to (no CVSS)
- [CVE-2016-1781](https://cve.now/CVE-2016-1781.md): WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users (no CVSS)
- [CVE-2016-1782](https://cve.now/CVE-2016-1782.md): WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remot (no CVSS)
- [CVE-2016-1783](https://cve.now/CVE-2016-1783.md): WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial o (no CVSS)
- [CVE-2016-1784](https://cve.now/CVE-2016-1784.md): The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a deni (no CVSS)
- [CVE-2016-1785](https://cve.now/CVE-2016-1785.md): The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cache (no CVSS)
- [CVE-2016-1786](https://cve.now/CVE-2016-1786.md): The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with a 3xx (aka redirectio (no CVSS)
- [CVE-2016-1787](https://cve.now/CVE-2016-1787.md): Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors. (no CVSS)
- [CVE-2016-1788](https://cve.now/CVE-2016-1788.md): Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechani (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-03-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.