# CVEs published 2016-08-18

6 CVEs were published on August 18, 2016: 0 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2016-1365](https://cve.now/CVE-2016-1365.md): The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticat (no CVSS)
- [CVE-2016-1457](https://cve.now/CVE-2016-1457.md): The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appli (no CVSS)
- [CVE-2016-1458](https://cve.now/CVE-2016-1458.md): The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisc (no CVSS)
- [CVE-2016-4654](https://cve.now/CVE-2016-4654.md): IOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of servic (no CVSS)
- [CVE-2016-6366](https://cve.now/CVE-2016-6366.md): Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, (CVSS 8.8, KEV)
- [CVE-2016-6367](https://cve.now/CVE-2016-6367.md): Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain pri (CVSS 7.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-08-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.