# CVEs published 2016-05-25

13 CVEs were published on May 25, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3672](https://cve.now/CVE-2014-3672.md): The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by (no CVSS)
- [CVE-2015-8853](https://cve.now/CVE-2015-8853.md): The (1) S\_reghop3, (2) S\_reghop4, and (3) S\_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to c (no CVSS)
- [CVE-2016-1886](https://cve.now/CVE-2016-1886.md): Integer signedness error in the genkbd\_commonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3 before p42, 10.1 before p34, 10.2 before p17 (no CVSS)
- [CVE-2016-1887](https://cve.now/CVE-2016-1887.md): Integer signedness error in the sockargs function in sys/kern/uipc\_syscalls.c in FreeBSD 10.1 before p34, 10.2 before p17, and 10.3 before p (no CVSS)
- [CVE-2016-4020](https://cve.now/CVE-2016-4020.md): The patch\_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrat (no CVSS)
- [CVE-2016-4575](https://cve.now/CVE-2016-4575.md): Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 bef (no CVSS)
- [CVE-2016-1380](https://cve.now/CVE-2016-1380.md): Cisco AsyncOS 8.0 before 8.0.6-119 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (proxy-proce (no CVSS)
- [CVE-2016-1381](https://cve.now/CVE-2016-1381.md): Memory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA) devices allows remote attackers to cause a den (no CVSS)
- [CVE-2016-1382](https://cve.now/CVE-2016-1382.md): Cisco AsyncOS before 8.5.3-069 and 8.6 through 8.8 on Web Security Appliance (WSA) devices mishandles memory allocation for HTTP requests, w (no CVSS)
- [CVE-2016-1383](https://cve.now/CVE-2016-1383.md): Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memor (no CVSS)
- [CVE-2016-1400](https://cve.now/CVE-2016-1400.md): Cisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers to cause a denial of service (service disrup (no CVSS)
- [CVE-2016-1406](https://cve.now/CVE-2016-1406.md): The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote aut (no CVSS)
- [CVE-2016-1407](https://cve.now/CVE-2016-1407.md): Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a den (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-05-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.