# CVEs published 2016-07-28

10 CVEs were published on July 28, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-4469](https://cve.now/CVE-2016-4469.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authenti (no CVSS)
- [CVE-2016-5005](https://cve.now/CVE-2016-5005.md): Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary (no CVSS, org.apache.archiva:archiva)
- [CVE-2016-1374](https://cve.now/CVE-2016-1374.md): The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier allows remote authenticated users to execute (no CVSS)
- [CVE-2016-1460](https://cve.now/CVE-2016-1460.md): Cisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote attackers to cause a denial of service via crafted (no CVSS)
- [CVE-2016-1462](https://cve.now/CVE-2016-1462.md): Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime Service Catalog (PSC) 11.0 allows remote attac (no CVSS)
- [CVE-2016-1463](https://cve.now/CVE-2016-1463.md): Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in (no CVSS)
- [CVE-2016-1465](https://cve.now/CVE-2016-1465.md): Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote attackers to cause a denial of service (ESXi (no CVSS)
- [CVE-2016-1467](https://cve.now/CVE-2016-1467.md): Cisco Videoscape Session Resource Manager (VSRM) allows remote attackers to cause a denial of service (device restart) by sending a traffic (no CVSS)
- [CVE-2016-4522](https://cve.now/CVE-2016-4522.md): SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2016-4531](https://cve.now/CVE-2016-4531.md): Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon a logout action, which makes it easier for (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-07-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.