# CVEs published 2016-08-19 17 CVEs were published on August 19, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2014-9906](https://cve.now/CVE-2014-9906.md): Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute ar (no CVSS) - [CVE-2015-8022](https://cve.now/CVE-2015-8022.md): The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11. (no CVSS) - [CVE-2015-8949](https://cve.now/CVE-2015-8949.md): Use-after-free vulnerability in the my\_login function in DBD::mysql before 4.033\_01 allows attackers to have unspecified impact by leveragin (no CVSS) - [CVE-2016-0760](https://cve.now/CVE-2016-0760.md): Multiple incomplete blacklist vulnerabilities in Apache Sentry before 1.7.0 allow remote authenticated users to execute arbitrary code via t (no CVSS) - [CVE-2016-3089](https://cve.now/CVE-2016-3089.md): Cross-site scripting (XSS) vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary we (no CVSS, org.apache.openmeetings:openmeetings-parent) - [CVE-2016-3193](https://cve.now/CVE-2016-3193.md): Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, an (no CVSS) - [CVE-2016-3194](https://cve.now/CVE-2016-3194.md): Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and For (no CVSS) - [CVE-2016-3195](https://cve.now/CVE-2016-3195.md): Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5 (no CVSS) - [CVE-2016-4451](https://cve.now/CVE-2016-4451.md): The (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenticated users with unli (no CVSS) - [CVE-2016-4475](https://cve.now/CVE-2016-4475.md): The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users t (no CVSS) - [CVE-2016-4995](https://cve.now/CVE-2016-4995.md): Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, which allows remote auth (no CVSS) - [CVE-2016-5390](https://cve.now/CVE-2016-5390.md): Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the view\_hosts permission containing a filter to obtain (no CVSS) - [CVE-2016-5736](https://cve.now/CVE-2016-5736.md): The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4 (no CVSS) - [CVE-2016-6254](https://cve.now/CVE-2016-6254.md): Heap-based buffer overflow in the parse\_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers t (no CVSS) - [CVE-2016-6319](https://cve.now/CVE-2016-6319.md): Cross-site scripting (XSS) vulnerability in app/helpers/form\_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly ot (no CVSS) - [CVE-2016-6320](https://cve.now/CVE-2016-6320.md): Cross-site scripting (XSS) vulnerability in app/assets/javascripts/host\_edit\_interfaces.js in Foreman before 1.12.2 allows remote authentica (no CVSS) - [CVE-2016-6493](https://cve.now/CVE-2016-6493.md): Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified securi (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-08-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.