# CVEs published 2016-04-14

21 CVEs were published on April 14, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2011-4600](https://cve.now/CVE-2011-4600.md): The networkReloadIptablesRules function in network/bridge\_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge (no CVSS)
- [CVE-2015-5247](https://cve.now/CVE-2015-5247.md): The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a de (no CVSS)
- [CVE-2015-8336](https://cve.now/CVE-2015-8336.md): Huawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to obtain sensitive "role and permission" info (no CVSS)
- [CVE-2015-8676](https://cve.now/CVE-2015-8676.md): Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R (no CVSS)
- [CVE-2015-8677](https://cve.now/CVE-2015-8677.md): Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200 (no CVSS)
- [CVE-2015-0284](https://cve.now/CVE-2015-0284.md): Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to injec (no CVSS)
- [CVE-2015-5343](https://cve.now/CVE-2015-5343.md): Integer overflow in util.c in mod\_dav\_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticate (no CVSS)
- [CVE-2015-7999](https://cve.now/CVE-2015-7999.md): Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before B (no CVSS)
- [CVE-2015-8540](https://cve.now/CVE-2015-8540.md): Integer underflow in the png\_check\_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1 (no CVSS)
- [CVE-2015-8550](https://cve.now/CVE-2015-8550.md): Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain (no CVSS)
- [CVE-2015-8554](https://cve.now/CVE-2015-8554.md): Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HV (no CVSS)
- [CVE-2015-8560](https://cve.now/CVE-2015-8560.md): Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x a (no CVSS)
- [CVE-2016-2103](https://cve.now/CVE-2016-2103.md): Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2016-3079](https://cve.now/CVE-2016-3079.md): Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject ar (no CVSS)
- [CVE-2016-4014](https://cve.now/CVE-2016-4014.md): XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2016-4015](https://cve.now/CVE-2016-4015.md): The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a craft (no CVSS)
- [CVE-2016-4016](https://cve.now/CVE-2016-4016.md): Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remote attacke (no CVSS)
- [CVE-2016-4017](https://cve.now/CVE-2016-4017.md): The Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial of service (process crash) via unspecified (no CVSS)
- [CVE-2016-4018](https://cve.now/CVE-2016-4018.md): The Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to service functionality, which allows remote attac (no CVSS)
- [CVE-2016-1352](https://cve.now/CVE-2016-1352.md): Cisco Unified Computing System (UCS) Central Software 1.3(1b) and earlier allows remote attackers to execute arbitrary OS commands via a cra (no CVSS)
- [CVE-2016-1378](https://cve.now/CVE-2016-1378.md): Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a r (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-04-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.