# CVEs published 2016-06-26

11 CVEs were published on June 26, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-7473](https://cve.now/CVE-2015-7473.md): runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue-manager command access restrictions by leveraging (no CVSS)
- [CVE-2016-0259](https://cve.now/CVE-2016-0259.md): runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass an intended +dsp authority requirement and obtain sensitive info (no CVSS)
- [CVE-2016-0277](https://cve.now/CVE-2016-0277.md): Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attack (no CVSS)
- [CVE-2016-0278](https://cve.now/CVE-2016-0278.md): Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attack (no CVSS)
- [CVE-2016-0279](https://cve.now/CVE-2016-0279.md): Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attack (no CVSS)
- [CVE-2016-0301](https://cve.now/CVE-2016-0301.md): Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attack (no CVSS)
- [CVE-2015-7987](https://cve.now/CVE-2015-7987.md): Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vec (no CVSS)
- [CVE-2015-7988](https://cve.now/CVE-2015-7988.md): The handle\_regservice\_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2016-2901](https://cve.now/CVE-2016-2901.md): Cross-site request forgery (CSRF) vulnerability in the PA\_Theme\_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Co (no CVSS)
- [CVE-2016-4513](https://cve.now/CVE-2016-4513.md): Cross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows r (no CVSS)
- [CVE-2016-5087](https://cve.now/CVE-2016-5087.md): Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which all (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-06-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.