# CVEs published 2016-05-20

84 CVEs were published on May 20, 2016: 0 critical, 1 high. Days are UTC.

- [CVE-2015-7557](https://cve.now/CVE-2015-7557.md): The \_rsvg\_node\_poly\_build\_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context-dependent attackers to cause a denial of se (no CVSS)
- [CVE-2015-7558](https://cve.now/CVE-2015-7558.md): librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application cr (no CVSS, librsvg)
- [CVE-2016-2100](https://cve.now/CVE-2016-2100.md): Foreman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read, modify, or delete private bookmarks by leveragi (no CVSS)
- [CVE-2016-3693](https://cve.now/CVE-2016-3693.md): The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attacke (no CVSS, safemode)
- [CVE-2016-3728](https://cve.now/CVE-2016-3728.md): Eval injection vulnerability in tftp\_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows r (no CVSS)
- [CVE-2016-4348](https://cve.now/CVE-2016-4348.md): The \_rsvg\_css\_normalize\_font\_size function in librsvg 2.40.2 allows context-dependent attackers to cause a denial of service (stack consumpt (no CVSS)
- [CVE-2016-4439](https://cve.now/CVE-2016-4439.md): The esp\_reg\_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer l (no CVSS)
- [CVE-2016-4441](https://cve.now/CVE-2016-4441.md): The get\_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allo (no CVSS)
- [CVE-2015-8865](https://cve.now/CVE-2015-8865.md): The file\_check\_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and (no CVSS)
- [CVE-2016-1742](https://cve.now/CVE-2016-1742.md): Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DL (no CVSS)
- [CVE-2016-1790](https://cve.now/CVE-2016-1790.md): Buffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to obtain sensitive kernel memory-layout informati (no CVSS)
- [CVE-2016-1791](https://cve.now/CVE-2016-1791.md): The AMD subsystem in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app. (no CVSS)
- [CVE-2016-1792](https://cve.now/CVE-2016-1792.md): The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of servi (no CVSS)
- [CVE-2016-1793](https://cve.now/CVE-2016-1793.md): AppleGraphicsDeviceControlClient in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a (no CVSS)
- [CVE-2016-1794](https://cve.now/CVE-2016-1794.md): The AppleGraphicsControlClient::checkArguments method in AppleGraphicsControl in Apple OS X before 10.11.5 allows attackers to execute arbit (no CVSS)
- [CVE-2016-1795](https://cve.now/CVE-2016-1795.md): AppleGraphicsPowerManagement in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a deni (no CVSS)
- [CVE-2016-1796](https://cve.now/CVE-2016-1796.md): Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a deni (no CVSS)
- [CVE-2016-1797](https://cve.now/CVE-2016-1797.md): Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and exe (no CVSS)
- [CVE-2016-1798](https://cve.now/CVE-2016-1798.md): Audio in Apple OS X before 10.11.5 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app. (no CVSS)
- [CVE-2016-1799](https://cve.now/CVE-2016-1799.md): Audio in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory c (no CVSS)
- [CVE-2016-1800](https://cve.now/CVE-2016-1800.md): Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execut (no CVSS)
- [CVE-2016-1801](https://cve.now/CVE-2016-1801.md): The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requ (no CVSS)
- [CVE-2016-1802](https://cve.now/CVE-2016-1802.md): CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values (no CVSS)
- [CVE-2016-1803](https://cve.now/CVE-2016-1803.md): CoreCapture in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrar (no CVSS)
- [CVE-2016-1804](https://cve.now/CVE-2016-1804.md): The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial (no CVSS)
- [CVE-2016-1805](https://cve.now/CVE-2016-1805.md): CoreStorage in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app. (no CVSS)
- [CVE-2016-1806](https://cve.now/CVE-2016-1806.md): Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app. (no CVSS)
- [CVE-2016-1807](https://cve.now/CVE-2016-1807.md): Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allo (no CVSS)
- [CVE-2016-1808](https://cve.now/CVE-2016-1808.md): The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to ex (no CVSS)
- [CVE-2016-1809](https://cve.now/CVE-2016-1809.md): Disk Utility in Apple OS X before 10.11.5 uses incorrect encryption keys for disk images, which has unspecified impact and attack vectors. (no CVSS)
- [CVE-2016-1810](https://cve.now/CVE-2016-1810.md): The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a de (no CVSS)
- [CVE-2016-1811](https://cve.now/CVE-2016-1811.md): ImageIO in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows remote attackers to cause a denia (no CVSS)
- [CVE-2016-1812](https://cve.now/CVE-2016-1812.md): Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via (no CVSS)
- [CVE-2016-1813](https://cve.now/CVE-2016-1813.md): The IOAccelSharedUserClient2::page\_off\_resource method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before (no CVSS)
- [CVE-2016-1814](https://cve.now/CVE-2016-1814.md): IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to cause a denial of service (NUL (no CVSS)
- [CVE-2016-1815](https://cve.now/CVE-2016-1815.md): IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of ser (no CVSS)
- [CVE-2016-1816](https://cve.now/CVE-2016-1816.md): IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of ser (no CVSS)
- [CVE-2016-1817](https://cve.now/CVE-2016-1817.md): IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute (no CVSS)
- [CVE-2016-1818](https://cve.now/CVE-2016-1818.md): IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute (no CVSS)
- [CVE-2016-1819](https://cve.now/CVE-2016-1819.md): Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before (no CVSS)
- [CVE-2016-1820](https://cve.now/CVE-2016-1820.md): Buffer overflow in IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a craft (no CVSS)
- [CVE-2016-1821](https://cve.now/CVE-2016-1821.md): IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service ( (no CVSS)
- [CVE-2016-1822](https://cve.now/CVE-2016-1822.md): IOFireWireFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of servic (no CVSS)
- [CVE-2016-1823](https://cve.now/CVE-2016-1823.md): The IOHIDDevice::handleReportWithTime function in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 a (no CVSS)
- [CVE-2016-1824](https://cve.now/CVE-2016-1824.md): IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrar (no CVSS)
- [CVE-2016-1825](https://cve.now/CVE-2016-1825.md): IOHIDFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (me (no CVSS)
- [CVE-2016-1826](https://cve.now/CVE-2016-1826.md): Integer overflow in the dtrace implementation in the kernel in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a pri (no CVSS)
- [CVE-2016-1827](https://cve.now/CVE-2016-1827.md): The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary (no CVSS)
- [CVE-2016-1828](https://cve.now/CVE-2016-1828.md): The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary (no CVSS)
- [CVE-2016-1829](https://cve.now/CVE-2016-1829.md): The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary (no CVSS)
- [CVE-2016-1830](https://cve.now/CVE-2016-1830.md): The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary (no CVSS)
- [CVE-2016-1831](https://cve.now/CVE-2016-1831.md): The kernel in Apple iOS before 9.3.2 and OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a d (no CVSS)
- [CVE-2016-1832](https://cve.now/CVE-2016-1832.md): libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to gain privileges or ca (no CVSS)
- [CVE-2016-1833](https://cve.now/CVE-2016-1833.md): The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS (no CVSS)
- [CVE-2016-1834](https://cve.now/CVE-2016-1834.md): Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS (CVSS 7.8)
- [CVE-2016-1835](https://cve.now/CVE-2016-1835.md): Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 1 (no CVSS)
- [CVE-2016-1836](https://cve.now/CVE-2016-1836.md): Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 1 (no CVSS)
- [CVE-2016-1837](https://cve.now/CVE-2016-1837.md): Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as (no CVSS)
- [CVE-2016-1838](https://cve.now/CVE-2016-1838.md): The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before (no CVSS)
- [CVE-2016-1839](https://cve.now/CVE-2016-1839.md): The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchO (no CVSS)
- [CVE-2016-1840](https://cve.now/CVE-2016-1840.md): Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10 (no CVSS)
- [CVE-2016-1841](https://cve.now/CVE-2016-1841.md): libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to exe (no CVSS)
- [CVE-2016-1842](https://cve.now/CVE-2016-1842.md): MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote att (no CVSS)
- [CVE-2016-1843](https://cve.now/CVE-2016-1843.md): The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtain sensitive informat (no CVSS)
- [CVE-2016-1844](https://cve.now/CVE-2016-1844.md): The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via uns (no CVSS)
- [CVE-2016-1846](https://cve.now/CVE-2016-1846.md): The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute (no CVSS)
- [CVE-2016-1847](https://cve.now/CVE-2016-1847.md): OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to exec (no CVSS)
- [CVE-2016-1848](https://cve.now/CVE-2016-1848.md): QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS)
- [CVE-2016-1849](https://cve.now/CVE-2016-1849.md): The "Clear History and Website Data" feature in Apple Safari before 9.1.1, as used in iOS before 9.3.2 and other products, mishandles the de (no CVSS)
- [CVE-2016-1850](https://cve.now/CVE-2016-1850.md): SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2016-1851](https://cve.now/CVE-2016-1851.md): The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expi (no CVSS)
- [CVE-2016-1852](https://cve.now/CVE-2016-1852.md): Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows physically proximate atta (no CVSS)
- [CVE-2016-1853](https://cve.now/CVE-2016-1853.md): Tcl in Apple OS X before 10.11.5 allows remote attackers to obtain sensitive information by leveraging SSLv2 support. (no CVSS)
- [CVE-2016-1854](https://cve.now/CVE-2016-1854.md): WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or (no CVSS)
- [CVE-2016-1855](https://cve.now/CVE-2016-1855.md): WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or (no CVSS)
- [CVE-2016-1856](https://cve.now/CVE-2016-1856.md): WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or (no CVSS)
- [CVE-2016-1857](https://cve.now/CVE-2016-1857.md): WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or (no CVSS)
- [CVE-2016-1858](https://cve.now/CVE-2016-1858.md): WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remo (no CVSS)
- [CVE-2016-1859](https://cve.now/CVE-2016-1859.md): The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute ar (no CVSS)
- [CVE-2016-4070](https://cve.now/CVE-2016-4070.md): Integer overflow in the php\_raw\_url\_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 al (no CVSS)
- [CVE-2016-4071](https://cve.now/CVE-2016-4071.md): Format string vulnerability in the php\_snmp\_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0. (no CVSS)
- [CVE-2016-4072](https://cve.now/CVE-2016-4072.md): The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a c (no CVSS)
- [CVE-2016-4073](https://cve.now/CVE-2016-4073.md): Multiple integer overflows in the mbfl\_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, an (no CVSS)
- [CVE-2016-3739](https://cve.now/CVE-2016-3739.md): The (1) mbed\_connect\_step1 function in lib/vtls/mbedtls.c and (2) polarssl\_connect\_step1 function in lib/vtls/polarssl.c in cURL and libcurl (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-05-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.