# CVEs published 2016-06-24

6 CVEs were published on June 24, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-4802](https://cve.now/CVE-2016-4802.md): Multiple untrusted search path vulnerabilities in cURL and libcurl before 7.49.1, when built with SSPI or telnet is enabled, allow local use (no CVSS)
- [CVE-2016-5021](https://cve.now/CVE-2016-5021.md): The iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.5.x before 11.5.4, 11.6.x before 11.6 (no CVSS)
- [CVE-2016-5435](https://cve.now/CVE-2016-5435.md): Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001 (no CVSS)
- [CVE-2016-5709](https://cve.now/CVE-2016-5709.md): SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with su (no CVSS)
- [CVE-2016-5722](https://cve.now/CVE-2016-5722.md): Huawei OceanStor 5300 V3, 5500 V3, 5600 V3, 5800 V3, 6800 V3, 18800 V3, and 18500 V3 before V300R003C10 sends the plaintext session token in (no CVSS)
- [CVE-2016-5723](https://cve.now/CVE-2016-5723.md): Huawei FusionInsight HD before V100R002C60SPC200 allows local users to gain root privileges via unspecified vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-06-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.