# CVEs published 2016-08-02

14 CVEs were published on August 2, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-1712](https://cve.now/CVE-2016-1712.md): Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow l (no CVSS)
- [CVE-2016-2408](https://cve.now/CVE-2016-2408.md): Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privi (no CVSS)
- [CVE-2016-5229](https://cve.now/CVE-2016-5229.md): Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote a (no CVSS)
- [CVE-2016-5403](https://cve.now/CVE-2016-5403.md): The virtqueue\_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumpti (no CVSS)
- [CVE-2016-6178](https://cve.now/CVE-2016-6178.md): Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devic (no CVSS)
- [CVE-2016-6192](https://cve.now/CVE-2016-6192.md): Buffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363 allows attackers to cause a denial of serv (no CVSS)
- [CVE-2016-6193](https://cve.now/CVE-2016-6193.md): Buffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363 allows attackers to cause a denial of serv (no CVSS)
- [CVE-2016-6232](https://cve.now/CVE-2016-6232.md): Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files vi (no CVSS)
- [CVE-2016-6258](https://cve.now/CVE-2016-6258.md): The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by (no CVSS)
- [CVE-2016-6259](https://cve.now/CVE-2016-6259.md): Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which (no CVSS)
- [CVE-2016-1238](https://cve.now/CVE-2016-1238.md): (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Di (no CVSS)
- [CVE-2016-3737](https://cve.now/CVE-2016-3737.md): The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP reque (no CVSS)
- [CVE-2016-6185](https://cve.now/CVE-2016-6185.md): The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users (no CVSS)
- [CVE-2016-6257](https://cve.now/CVE-2016-6257.md): The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM60 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-08-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.