# CVEs published 2016-06-19

37 CVEs were published on June 19, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-7462](https://cve.now/CVE-2015-7462.md): IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output b (no CVSS)
- [CVE-2015-7776](https://cve.now/CVE-2015-7776.md): Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to tra (no CVSS)
- [CVE-2016-0392](https://cve.now/CVE-2016-0392.md): IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x befor (no CVSS)
- [CVE-2016-0911](https://cve.now/CVE-2016-0911.md): EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no\_root\_squash option for NFS exports, which makes it easier for remote atta (no CVSS)
- [CVE-2016-0912](https://cve.now/CVE-2016-0912.md): EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by lever (no CVSS)
- [CVE-2016-1191](https://cve.now/CVE-2016-1191.md): Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings (no CVSS)
- [CVE-2016-1192](https://cve.now/CVE-2016-1192.md): Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a (no CVSS)
- [CVE-2016-1196](https://cve.now/CVE-2016-1196.md): Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address (no CVSS)
- [CVE-2016-1860](https://cve.now/CVE-2016-1860.md): Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app, (no CVSS)
- [CVE-2016-1861](https://cve.now/CVE-2016-1861.md): The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cau (no CVSS)
- [CVE-2016-1862](https://cve.now/CVE-2016-1862.md): Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app, (no CVSS)
- [CVE-2016-1864](https://cve.now/CVE-2016-1864.md): The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which al (no CVSS)
- [CVE-2016-4514](https://cve.now/CVE-2016-4514.md): Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a l (no CVSS)
- [CVE-2016-4518](https://cve.now/CVE-2016-4518.md): OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message. (no CVSS)
- [CVE-2016-4530](https://cve.now/CVE-2016-4530.md): OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to cause a denial of service (service outage and d (no CVSS)
- [CVE-2016-4811](https://cve.now/CVE-2016-4811.md): The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-i (no CVSS)
- [CVE-2015-7775](https://cve.now/CVE-2015-7775.md): Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2016-1195](https://cve.now/CVE-2016-1195.md): Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and c (no CVSS)
- [CVE-2016-1197](https://cve.now/CVE-2016-1197.md): Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2016-1225](https://cve.now/CVE-2016-1225.md): Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors. (no CVSS)
- [CVE-2016-1226](https://cve.now/CVE-2016-1226.md): Cross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2016-1183](https://cve.now/CVE-2016-1183.md): NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and ot (no CVSS)
- [CVE-2016-1223](https://cve.now/CVE-2016-1223.md): Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Securit (no CVSS)
- [CVE-2016-1224](https://cve.now/CVE-2016-1224.md): CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.0 allows remote atta (no CVSS)
- [CVE-2016-1395](https://cve.now/CVE-2016-1395.md): The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and R (no CVSS)
- [CVE-2016-1396](https://cve.now/CVE-2016-1396.md): Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W (no CVSS)
- [CVE-2016-1397](https://cve.now/CVE-2016-1397.md): Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware bef (no CVSS)
- [CVE-2016-1424](https://cve.now/CVE-2016-1424.md): Cisco IOS 15.2(1)T1.11 and 15.2(2)TST allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka Bug (no CVSS)
- [CVE-2016-4371](https://cve.now/CVE-2016-4371.md): HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive inform (no CVSS)
- [CVE-2016-4813](https://cve.now/CVE-2016-4813.md): NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users to gain privileges by creating a SYSTEM\_ADMIN accou (no CVSS)
- [CVE-2016-4814](https://cve.now/CVE-2016-4814.md): Directory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan (aka GSI) Old\_GSI\_Maps before January 2015 o (no CVSS)
- [CVE-2016-4815](https://cve.now/CVE-2016-4815.md): Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 a (no CVSS)
- [CVE-2016-4816](https://cve.now/CVE-2016-4816.md): BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other (no CVSS)
- [CVE-2016-4817](https://cve.now/CVE-2016-4817.md): lib/http2/connection.c in H2O before 1.7.3 and 2.x before 2.0.0-beta5 mishandles HTTP/2 disconnection, which allows remote attackers to caus (no CVSS)
- [CVE-2016-4819](https://cve.now/CVE-2016-4819.md): The printfDx function in Takumi Yamada DX Library for Borland C++ 3.13f through 3.16b, DX Library for Gnu C++ 3.13f through 3.16b, and DX Li (no CVSS)
- [CVE-2016-4820](https://cve.now/CVE-2016-4820.md): Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arb (no CVSS)
- [CVE-2016-4821](https://cve.now/CVE-2016-4821.md): I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service (web-server crash) via unspecified vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-06-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.