# CVEs published 2016-06-29

18 CVEs were published on June 29, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2012-6703](https://cve.now/CVE-2012-6703.md): Integer overflow in the snd\_compr\_allocate\_buffer function in sound/core/compress\_offload.c in the ALSA subsystem in the Linux kernel before (no CVSS)
- [CVE-2016-1237](https://cve.now/CVE-2016-1237.md): nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to (no CVSS)
- [CVE-2016-5101](https://cve.now/CVE-2016-5101.md): Unspecified vulnerability in Opera Mail before 2016-02-16 on Windows allows user-assisted remote attackers to execute arbitrary code via a c (no CVSS)
- [CVE-2016-5832](https://cve.now/CVE-2016-5832.md): The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors. (no CVSS)
- [CVE-2016-5833](https://cve.now/CVE-2016-5833.md): Cross-site scripting (XSS) vulnerability in the column\_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress before (no CVSS)
- [CVE-2016-5834](https://cve.now/CVE-2016-5834.md): Cross-site scripting (XSS) vulnerability in the wp\_get\_attachment\_link function in wp-includes/post-template.php in WordPress before 4.5.3 a (no CVSS)
- [CVE-2016-5835](https://cve.now/CVE-2016-5835.md): WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, re (no CVSS)
- [CVE-2016-5836](https://cve.now/CVE-2016-5836.md): The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors. (no CVSS)
- [CVE-2016-5837](https://cve.now/CVE-2016-5837.md): WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspec (no CVSS)
- [CVE-2016-5838](https://cve.now/CVE-2016-5838.md): WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie. (no CVSS)
- [CVE-2016-5839](https://cve.now/CVE-2016-5839.md): WordPress before 4.5.3 allows remote attackers to bypass the sanitize\_file\_name protection mechanism via unspecified vectors. (no CVSS)
- [CVE-2015-8698](https://cve.now/CVE-2015-8698.md): CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 (no CVSS)
- [CVE-2015-8699](https://cve.now/CVE-2015-8699.md): Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5. (no CVSS)
- [CVE-2016-0260](https://cve.now/CVE-2016-0260.md): Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap memory (no CVSS)
- [CVE-2016-0263](https://cve.now/CVE-2016-0263.md): IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to gain (no CVSS)
- [CVE-2016-0267](https://cve.now/CVE-2016-0267.md): IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensi (no CVSS)
- [CVE-2016-0298](https://cve.now/CVE-2016-0298.md): Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to (no CVSS)
- [CVE-2016-0304](https://cve.now/CVE-2016-0304.md): The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-06-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.