# CVEs published 2016-05-31

15 CVEs were published on May 31, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-0875](https://cve.now/CVE-2016-0875.md): Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL. (no CVSS)
- [CVE-2016-0876](https://cve.now/CVE-2016-0876.md): Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file. (no CVSS)
- [CVE-2016-0877](https://cve.now/CVE-2016-0877.md): Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service (memory consumption) b (no CVSS)
- [CVE-2016-0878](https://cve.now/CVE-2016-0878.md): Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted pi (no CVSS)
- [CVE-2016-0879](https://cve.now/CVE-2016-0879.md): Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, (no CVSS)
- [CVE-2016-2285](https://cve.now/CVE-2016-2285.md): Cross-site request forgery (CSRF) vulnerability on Moxa MiiNePort\_E1\_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort\_E1\_7080 dev (no CVSS)
- [CVE-2016-2286](https://cve.now/CVE-2016-2286.md): Moxa MiiNePort\_E1\_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort\_E1\_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort (no CVSS)
- [CVE-2016-2295](https://cve.now/CVE-2016-2295.md): Moxa MiiNePort\_E1\_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort\_E1\_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort (no CVSS)
- [CVE-2016-4501](https://cve.now/CVE-2016-4501.md): Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass a (no CVSS)
- [CVE-2016-4502](https://cve.now/CVE-2016-4502.md): Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions (no CVSS)
- [CVE-2016-4505](https://cve.now/CVE-2016-4505.md): Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allow remote authenticated users to modify arbitrary passw (no CVSS)
- [CVE-2016-4506](https://cve.now/CVE-2016-4506.md): Cross-site request forgery (CSRF) vulnerability on Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allows (no CVSS)
- [CVE-2016-4521](https://cve.now/CVE-2016-4521.md): Sixnet BT-5xxx and BT-6xxx M2M devices before 3.8.21 and 3.9.x before 3.9.8 have hardcoded credentials, which allows remote attackers to obt (no CVSS)
- [CVE-2016-4784](https://cve.now/CVE-2016-4784.md): A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions \< V1.04.01; Firmware variant Mo (no CVSS)
- [CVE-2016-4785](https://cve.now/CVE-2016-4785.md): A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions \< V1.04.01; Firmware variant Mo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-05-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.