# CVEs published 2016-08-01

14 CVEs were published on August 1, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-1461](https://cve.now/CVE-2016-1461.md): Cisco AsyncOS on Email Security Appliance (ESA) devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted (no CVSS)
- [CVE-2016-1605](https://cve.now/CVE-2016-1605.md): Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attacker (no CVSS)
- [CVE-2016-1607](https://cve.now/CVE-2016-1607.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow (no CVSS)
- [CVE-2016-1608](https://cve.now/CVE-2016-1608.md): vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbi (no CVSS)
- [CVE-2016-1609](https://cve.now/CVE-2016-1609.md): Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remot (no CVSS)
- [CVE-2016-1610](https://cve.now/CVE-2016-1610.md): Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 (no CVSS)
- [CVE-2016-1611](https://cve.now/CVE-2016-1611.md): Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows loc (no CVSS)
- [CVE-2016-3120](https://cve.now/CVE-2016-3120.md): The validate\_as\_request function in kdc\_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x bef (no CVSS)
- [CVE-2016-4373](https://cve.now/CVE-2016-4373.md): The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands (no CVSS)
- [CVE-2016-4834](https://cve.now/CVE-2016-4834.md): modules/Users/actions/Save.php in Vtiger CRM 6.4.0 and earlier does not properly restrict user-save actions, which allows remote authenticat (no CVSS)
- [CVE-2016-4837](https://cve.now/CVE-2016-4837.md): SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via u (no CVSS)
- [CVE-2016-5138](https://cve.now/CVE-2016-5138.md): Integer overflow in the kbasep\_vinstr\_attach\_client function in midgard/mali\_kbase\_vinstr.c in Google Chrome before 52.0.2743.85 allows remo (no CVSS)
- [CVE-2016-5672](https://cve.now/CVE-2016-5672.md): Intel Crosswalk before 19.49.514.5, 20.x before 20.50.533.11, 21.x before 21.51.546.0, and 22.x before 22.51.549.0 interprets a user's accep (no CVSS)
- [CVE-2016-2180](https://cve.now/CVE-2016-2180.md): The TS\_OBJ\_print\_bio function in crypto/ts/ts\_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenS (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-08-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.