# CVEs published 2016-06-08

40 CVEs were published on June 8, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-2142](https://cve.now/CVE-2016-2142.md): Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allo (no CVSS)
- [CVE-2016-2149](https://cve.now/CVE-2016-2149.md): Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a prev (no CVSS)
- [CVE-2016-2160](https://cve.now/CVE-2016-2160.md): Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing (no CVSS)
- [CVE-2016-3703](https://cve.now/CVE-2016-3703.md): Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/prox (no CVSS)
- [CVE-2016-3708](https://cve.now/CVE-2016-3708.md): Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from po (no CVSS)
- [CVE-2016-3711](https://cve.now/CVE-2016-3711.md): HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading th (no CVSS)
- [CVE-2016-3738](https://cve.now/CVE-2016-3738.md): Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Dock (no CVSS)
- [CVE-2015-8157](https://cve.now/CVE-2015-8157.md): SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP (no CVSS)
- [CVE-2015-8798](https://cve.now/CVE-2015-8798.md): Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before (no CVSS)
- [CVE-2015-8799](https://cve.now/CVE-2015-8799.md): Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before (no CVSS)
- [CVE-2015-8800](https://cve.now/CVE-2015-8800.md): Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Con (no CVSS)
- [CVE-2016-1405](https://cve.now/CVE-2016-1405.md): libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices befor (no CVSS)
- [CVE-2016-1418](https://cve.now/CVE-2016-1418.md): Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linu (no CVSS)
- [CVE-2016-2017](https://cve.now/CVE-2016-2017.md): HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecif (no CVSS)
- [CVE-2016-2018](https://cve.now/CVE-2016-2018.md): HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vector (no CVSS)
- [CVE-2016-2019](https://cve.now/CVE-2016-2019.md): HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecif (no CVSS)
- [CVE-2016-2020](https://cve.now/CVE-2016-2020.md): HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecif (no CVSS)
- [CVE-2016-2021](https://cve.now/CVE-2016-2021.md): HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecif (no CVSS)
- [CVE-2016-2022](https://cve.now/CVE-2016-2022.md): HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecif (no CVSS)
- [CVE-2016-2024](https://cve.now/CVE-2016-2024.md): HPE Insight Control before 7.5.1 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspe (no CVSS)
- [CVE-2016-2026](https://cve.now/CVE-2016-2026.md): HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different v (no CVSS)
- [CVE-2016-2027](https://cve.now/CVE-2016-2027.md): HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different v (no CVSS)
- [CVE-2016-2028](https://cve.now/CVE-2016-2028.md): HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecifi (no CVSS)
- [CVE-2016-2029](https://cve.now/CVE-2016-2029.md): HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors (no CVSS)
- [CVE-2016-2030](https://cve.now/CVE-2016-2030.md): HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecif (no CVSS)
- [CVE-2016-2078](https://cve.now/CVE-2016-2078.md): Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 befo (no CVSS)
- [CVE-2016-4357](https://cve.now/CVE-2016-4357.md): HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecifi (no CVSS)
- [CVE-2016-4358](https://cve.now/CVE-2016-4358.md): HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors (no CVSS)
- [CVE-2016-4359](https://cve.now/CVE-2016-4359.md): Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, (no CVSS)
- [CVE-2016-4360](https://cve.now/CVE-2016-4360.md): web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch 3, 12.00 through patc (no CVSS)
- [CVE-2016-4361](https://cve.now/CVE-2016-4361.md): HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Per (no CVSS)
- [CVE-2016-4362](https://cve.now/CVE-2016-4362.md): HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data via unspecified vecto (no CVSS)
- [CVE-2016-4363](https://cve.now/CVE-2016-4363.md): HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors. (no CVSS)
- [CVE-2016-4364](https://cve.now/CVE-2016-4364.md): HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors. (no CVSS)
- [CVE-2016-4365](https://cve.now/CVE-2016-4365.md): HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors. (no CVSS)
- [CVE-2016-4366](https://cve.now/CVE-2016-4366.md): HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or cause a denial of se (no CVSS)
- [CVE-2016-4367](https://cve.now/CVE-2016-4367.md): The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensit (no CVSS)
- [CVE-2016-4368](https://cve.now/CVE-2016-4368.md): HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 a (no CVSS)
- [CVE-2016-4369](https://cve.now/CVE-2016-4369.md): HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authen (no CVSS)
- [CVE-2016-5108](https://cve.now/CVE-2016-5108.md): Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.