# CVEs published 2016-07-08

12 CVEs were published on July 8, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-4324](https://cve.now/CVE-2016-4324.md): Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related t (no CVSS)
- [CVE-2016-4463](https://cve.now/CVE-2016-4463.md): Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply n (no CVSS)
- [CVE-2016-0252](https://cve.now/CVE-2016-0252.md): IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master (no CVSS)
- [CVE-2016-0271](https://cve.now/CVE-2016-0271.md): The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in (no CVSS)
- [CVE-2016-0287](https://cve.now/CVE-2016-0287.md): IBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified vectors. (no CVSS)
- [CVE-2016-0313](https://cve.now/CVE-2016-0313.md): Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x b (no CVSS)
- [CVE-2016-0314](https://cve.now/CVE-2016-0314.md): The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifi (no CVSS)
- [CVE-2016-0315](https://cve.now/CVE-2016-0315.md): The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifi (no CVSS)
- [CVE-2016-0350](https://cve.now/CVE-2016-0350.md): Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x b (no CVSS)
- [CVE-2016-2888](https://cve.now/CVE-2016-2888.md): Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x b (no CVSS)
- [CVE-2016-2889](https://cve.now/CVE-2016-2889.md): Cross-site request forgery (CSRF) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS (no CVSS)
- [CVE-2016-2945](https://cve.now/CVE-2016-2945.md): The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-07-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.