# CVEs published 2016-08-26 19 CVEs were published on August 26, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2015-5399](https://cve.now/CVE-2015-5399.md): Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via (no CVSS) - [CVE-2016-4119](https://cve.now/CVE-2016-4119.md): Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4265](https://cve.now/CVE-2016-4265.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4266](https://cve.now/CVE-2016-4266.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4267](https://cve.now/CVE-2016-4267.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4268](https://cve.now/CVE-2016-4268.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4269](https://cve.now/CVE-2016-4269.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4270](https://cve.now/CVE-2016-4270.md): Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin (no CVSS) - [CVE-2016-4378](https://cve.now/CVE-2016-4378.md): The (1) Device Manager, (2) Tiered Storage Manager, (3) Replication Manager, (4) Replication Monitor, and (5) Hitachi Automation Director (H (no CVSS) - [CVE-2016-5048](https://cve.now/CVE-2016-5048.md): SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the us (no CVSS) - [CVE-2016-5049](https://cve.now/CVE-2016-5049.md): Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2016-5050](https://cve.now/CVE-2016-5050.md): Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading (no CVSS) - [CVE-2016-5662](https://cve.now/CVE-2016-5662.md): Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges (no CVSS) - [CVE-2016-5663](https://cve.now/CVE-2016-5663.md): Multiple cross-site scripting (XSS) vulnerabilities in oauth\_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote (no CVSS) - [CVE-2016-5664](https://cve.now/CVE-2016-5664.md): Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted (no CVSS) - [CVE-2016-5683](https://cve.now/CVE-2016-5683.md): ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL\_Config.aspx file and decrypting data with (no CVSS) - [CVE-2016-1497](https://cve.now/CVE-2016-1497.md): The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 1 (no CVSS) - [CVE-2016-5023](https://cve.now/CVE-2016-5023.md): Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 through 11.5.4, 11.6.0 HF5 through HF7, and 1 (no CVSS) - [CVE-2016-5383](https://cve.now/CVE-2016-5383.md): The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filter (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-08-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.