# CVEs published 2016-08-10

6 CVEs were published on August 10, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7458](https://cve.now/CVE-2013-7458.md): linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli\_history, which allows local users to obtain sensitiv (no CVSS)
- [CVE-2016-5408](https://cve.now/CVE-2016-5408.md): Stack-based buffer overflow in the munge\_other\_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6\_8.6 in Red Hat Enterp (no CVSS)
- [CVE-2016-5419](https://cve.now/CVE-2016-5419.md): curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers (no CVSS)
- [CVE-2016-5420](https://cve.now/CVE-2016-5420.md): curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attac (no CVSS)
- [CVE-2016-5421](https://cve.now/CVE-2016-5421.md): Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified othe (no CVSS)
- [CVE-2016-6597](https://cve.now/CVE-2016-6597.md): Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-res (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-08-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.