# CVEs published 2016-07-03

46 CVEs were published on July 3, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-0221](https://cve.now/CVE-2016-0221.md): Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17 (no CVSS)
- [CVE-2016-0346](https://cve.now/CVE-2016-0346.md): Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10. (no CVSS)
- [CVE-2016-0359](https://cve.now/CVE-2016-0359.md): CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 Full before 8.5.5.10, a (no CVSS)
- [CVE-2016-1328](https://cve.now/CVE-2016-1328.md): goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long h\_sortWireless (no CVSS)
- [CVE-2016-1336](https://cve.now/CVE-2016-1336.md): goform/Docsis\_system on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long LanguageSelect (no CVSS)
- [CVE-2016-1337](https://cve.now/CVE-2016-1337.md): Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential information by making requests during the earl (no CVSS)
- [CVE-2016-1398](https://cve.now/CVE-2016-1398.md): Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware th (no CVSS)
- [CVE-2016-1425](https://cve.now/CVE-2016-1425.md): Cisco IOS 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S, and 15.4(1.13)S allows remote attackers to cause a denial of service (device crash) vi (no CVSS)
- [CVE-2016-1704](https://cve.now/CVE-2016-1704.md): Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibly have oth (no CVSS)
- [CVE-2016-2074](https://cve.now/CVE-2016-2074.md): Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to (no CVSS)
- [CVE-2016-2862](https://cve.now/CVE-2016-2862.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 before 7.0.0.9 cumulative iFix 3, and 8.0 befor (no CVSS)
- [CVE-2016-2863](https://cve.now/CVE-2016-2863.md): Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8. (no CVSS)
- [CVE-2016-2894](https://cve.now/CVE-2016-2894.md): IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 through 6.3 before 6.3.2.6, 6.4 before 6.4.3.3, and 7.1 before 7.1.6 allows local (no CVSS)
- [CVE-2016-3955](https://cve.now/CVE-2016-3955.md): The usbip\_recv\_xbuff function in drivers/usb/usbip/usbip\_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial (no CVSS)
- [CVE-2016-4997](https://cve.now/CVE-2016-4997.md): The compat IPT\_SO\_SET\_REPLACE and IP6T\_SO\_SET\_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 (no CVSS)
- [CVE-2016-4998](https://cve.now/CVE-2016-4998.md): The IPT\_SO\_SET\_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a den (no CVSS)
- [CVE-2016-6130](https://cve.now/CVE-2016-6130.md): Race condition in the sclp\_ctl\_ioctl\_sccb function in drivers/s390/char/sclp\_ctl.c in the Linux kernel before 4.6 allows local users to obta (no CVSS)
- [CVE-2015-5664](https://cve.now/CVE-2015-5664.md): Cross-site scripting (XSS) vulnerability in File Station in QNAP QTS before 4.2.0 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2016-1227](https://cve.now/CVE-2016-1227.md): NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with f (no CVSS)
- [CVE-2016-1228](https://cve.now/CVE-2016-1228.md): Cross-site request forgery (CSRF) vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 a (no CVSS)
- [CVE-2016-3962](https://cve.now/CVE-2016-3962.md): Stack-based buffer overflow in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M90 (no CVSS)
- [CVE-2016-3988](https://cve.now/CVE-2016-3988.md): Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, L (no CVSS)
- [CVE-2016-3989](https://cve.now/CVE-2016-3989.md): The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, (no CVSS)
- [CVE-2016-4509](https://cve.now/CVE-2016-4509.md): Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code vi (no CVSS)
- [CVE-2016-4512](https://cve.now/CVE-2016-4512.md): Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long (no CVSS)
- [CVE-2015-6931](https://cve.now/CVE-2015-6931.md): Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U (no CVSS)
- [CVE-2015-7029](https://cve.now/CVE-2015-7029.md): Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x before 7.7.7 misparses DNS data, which allows remote attackers to execute arbitra (no CVSS)
- [CVE-2016-1394](https://cve.now/CVE-2016-1394.md): Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveragin (no CVSS)
- [CVE-2016-1441](https://cve.now/CVE-2016-1441.md): Cisco Cloud Network Automation Provisioner (CNAP) 1.0(0) in Cisco Configuration Assistant (CCA) allows remote attackers to bypass intended f (no CVSS)
- [CVE-2016-1606](https://cve.now/CVE-2016-1606.md): Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitr (no CVSS)
- [CVE-2016-2079](https://cve.now/CVE-2016-2079.md): VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote (no CVSS)
- [CVE-2016-2081](https://cve.now/CVE-2016-2081.md): Cross-site scripting (XSS) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2016-2082](https://cve.now/CVE-2016-2082.md): Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack th (no CVSS)
- [CVE-2016-5228](https://cve.now/CVE-2016-5228.md): Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11 (no CVSS)
- [CVE-2016-5701](https://cve.now/CVE-2016-5701.md): setup/frames/index.inc.php in phpMyAdmin 4.0.10.x before 4.0.10.16, 4.4.15.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-5702](https://cve.now/CVE-2016-5702.md): phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHP\_SELF value, allows remote attackers to conduct cookie-attribute injection at (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-5703](https://cve.now/CVE-2016-5703.md): SQL injection vulnerability in libraries/central\_columns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote at (no CVSS)
- [CVE-2016-5704](https://cve.now/CVE-2016-5704.md): Cross-site scripting (XSS) vulnerability in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allows remote attackers to inject arbi (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-5705](https://cve.now/CVE-2016-5705.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inj (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-5706](https://cve.now/CVE-2016-5706.md): js/get\_scripts.js.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to cause a (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-5730](https://cve.now/CVE-2016-5730.md): phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-5731](https://cve.now/CVE-2016-5731.md): Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x befor (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-5732](https://cve.now/CVE-2016-5732.md): Multiple cross-site scripting (XSS) vulnerabilities in the partition-range implementation in templates/table/structure/display\_partitions.ph (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-5733](https://cve.now/CVE-2016-5733.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allo (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-5734](https://cve.now/CVE-2016-5734.md): phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the p (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2016-5739](https://cve.now/CVE-2016-5739.md): The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-re (no CVSS, phpmyadmin/phpmyadmin)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-07-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.