# CVEs published 2016-05-18

4 CVEs were published on May 18, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-0707](https://cve.now/CVE-2016-0707.md): The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data and (2) /var/lib/ambari-agent/keys dire (no CVSS)
- [CVE-2016-0731](https://cve.now/CVE-2016-0731.md): The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in th (no CVSS)
- [CVE-2016-2077](https://cve.now/CVE-2016-2077.md): VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host (no CVSS)
- [CVE-2016-4480](https://cve.now/CVE-2016-4480.md): The guest\_walk\_tables function in arch/x86/mm/guest\_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table e (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-05-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.