# CVEs published 2016-06-25

14 CVEs were published on June 25, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-1188](https://cve.now/CVE-2016-1188.md): Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors. (no CVSS)
- [CVE-2016-1189](https://cve.now/CVE-2016-1189.md): Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying (no CVSS)
- [CVE-2016-1190](https://cve.now/CVE-2016-1190.md): Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vecto (no CVSS)
- [CVE-2016-1193](https://cve.now/CVE-2016-1193.md): Cybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading information via unspecified vectors. (no CVSS)
- [CVE-2016-4822](https://cve.now/CVE-2016-4822.md): Corega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via unspecified vectors. (no CVSS)
- [CVE-2016-4823](https://cve.now/CVE-2016-4823.md): Corega CG-WLBARAGM devices allow remote attackers to cause a denial of service (reboot) via unspecified vectors. (no CVSS)
- [CVE-2016-4824](https://cve.now/CVE-2016-4824.md): The Wi-Fi Protected Setup (WPS) implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authent (no CVSS)
- [CVE-2016-4825](https://cve.now/CVE-2016-4825.md): The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to conduct PHP object injection attacks and execute (no CVSS)
- [CVE-2016-4826](https://cve.now/CVE-2016-4826.md): Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to injec (no CVSS)
- [CVE-2016-4827](https://cve.now/CVE-2016-4827.md): Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to injec (no CVSS)
- [CVE-2016-4828](https://cve.now/CVE-2016-4828.md): The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to obtain access by lever (no CVSS)
- [CVE-2016-4519](https://cve.now/CVE-2016-4519.md): Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted f (no CVSS)
- [CVE-2016-4525](https://cve.now/CVE-2016-4525.md): Unspecified ActiveX controls in Advantech WebAccess before 8.1\_20160519 allow remote authenticated users to obtain sensitive information or (no CVSS)
- [CVE-2016-4528](https://cve.now/CVE-2016-4528.md): Buffer overflow in Advantech WebAccess before 8.1\_20160519 allows local users to cause a denial of service via a crafted DLL file. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-06-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.