# CVEs published 2016-06-10 22 CVEs were published on June 10, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2016-2785](https://cve.now/CVE-2016-2785.md): Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to (no CVSS, puppet) - [CVE-2016-2786](https://cve.now/CVE-2016-2786.md): The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not properly validate server (no CVSS) - [CVE-2016-3085](https://cve.now/CVE-2016-3085.md): Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML-based authentication (no CVSS) - [CVE-2016-3706](https://cve.now/CVE-2016-3706.md): Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc or libc6) allows remo (no CVSS) - [CVE-2016-3720](https://cve.now/CVE-2016-3720.md): XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers (no CVSS, com.fasterxml.jackson.dataformat:jackson-dataformat-xml) - [CVE-2016-4429](https://cve.now/CVE-2016-4429.md): Stack-based buffer overflow in the clntudp\_call function in sunrpc/clnt\_udp.c in the GNU C Library (aka glibc or libc6) allows remote server (no CVSS) - [CVE-2016-5118](https://cve.now/CVE-2016-5118.md): The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (p (no CVSS) - [CVE-2016-5233](https://cve.now/CVE-2016-5233.md): Huawei Mate 8 smartphones with software NXT-AL10 before NXT-AL10C00B182, NXT-CL00 before NXT-CL00C92B182, NXT-DL00 before NXT-DL00C17B182, a (no CVSS) - [CVE-2015-8268](https://cve.now/CVE-2015-8268.md): The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecifie (no CVSS) - [CVE-2016-0910](https://cve.now/CVE-2016-0910.md): EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-reada (no CVSS) - [CVE-2016-0916](https://cve.now/CVE-2016-0916.md): EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute (no CVSS) - [CVE-2016-1419](https://cve.now/CVE-2016-1419.md): Cisco Access Point devices with software 8.2(102.43) allow remote attackers to cause a denial of service (device reload) via crafted ARP pac (no CVSS) - [CVE-2016-1420](https://cve.now/CVE-2016-1420.md): The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles bina (no CVSS) - [CVE-2016-1421](https://cve.now/CVE-2016-1421.md): A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privile (no CVSS, Cisco IP Phones) - [CVE-2016-4326](https://cve.now/CVE-2016-4326.md): The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary code via crafted serial (no CVSS) - [CVE-2016-4328](https://cve.now/CVE-2016-4328.md): MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for r (no CVSS) - [CVE-2016-4494](https://cve.now/CVE-2016-4494.md): Cross-site request forgery (CSRF) vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows remote attackers to h (no CVSS) - [CVE-2016-4495](https://cve.now/CVE-2016-4495.md): KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restrictions and read a config (no CVSS) - [CVE-2016-4511](https://cve.now/CVE-2016-4511.md): ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for local users to obtain sen (no CVSS) - [CVE-2016-4516](https://cve.now/CVE-2016-4516.md): ABB PCM600 before 2.7 improperly stores the main application password after a password change, which allows local users to obtain sensitive (no CVSS) - [CVE-2016-4524](https://cve.now/CVE-2016-4524.md): ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to ob (no CVSS) - [CVE-2016-4527](https://cve.now/CVE-2016-4527.md): ABB PCM600 before 2.7 improperly stores PCM600 authentication credentials, which allows local users to obtain sensitive information via unsp (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-06-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.