# CVEs published 2016-09-01

16 CVEs were published on September 1, 2016: 0 critical, 1 high. Days are UTC.

- [CVE-2016-4264](https://cve.now/CVE-2016-4264.md): The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrar (no CVSS)
- [CVE-2016-6298](https://cve.now/CVE-2016-6298.md): The \_Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, w (no CVSS, jwcrypto)
- [CVE-2016-0385](https://cve.now/CVE-2016-0385.md): Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.10, 9.0 before 9.0.0.1, (no CVSS)
- [CVE-2016-2954](https://cve.now/CVE-2016-2954.md): Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated user (no CVSS)
- [CVE-2016-2956](https://cve.now/CVE-2016-2956.md): Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated user (no CVSS)
- [CVE-2016-2995](https://cve.now/CVE-2016-2995.md): Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before C (no CVSS)
- [CVE-2016-2997](https://cve.now/CVE-2016-2997.md): Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before C (no CVSS)
- [CVE-2016-2998](https://cve.now/CVE-2016-2998.md): Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allo (no CVSS)
- [CVE-2016-3005](https://cve.now/CVE-2016-3005.md): Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before C (no CVSS)
- [CVE-2016-3008](https://cve.now/CVE-2016-3008.md): Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated user (no CVSS)
- [CVE-2016-3010](https://cve.now/CVE-2016-3010.md): Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before C (no CVSS)
- [CVE-2016-5047](https://cve.now/CVE-2016-5047.md): NetApp OnCommand System Manager 8.3.x before 8.3.2P5 allows remote authenticated users to cause a denial of service via unspecified vectors. (no CVSS)
- [CVE-2016-0293](https://cve.now/CVE-2016-0293.md): Cross-site scripting (XSS) vulnerability in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.1.8 and 9.2.x before 9.2.8 a (no CVSS)
- [CVE-2016-0370](https://cve.now/CVE-2016-0370.md): Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3 allows remote authenticated users to i (no CVSS)
- [CVE-2016-3064](https://cve.now/CVE-2016-3064.md): NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant (no CVSS)
- [CVE-2016-2183](https://cve.now/CVE-2016-2183.md): The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of appr (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-09-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.