# CVEs published 2016-09-09

14 CVEs were published on September 9, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-1263](https://cve.now/CVE-2016-1263.md): Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9-S1, 14.1 before (no CVSS)
- [CVE-2016-1275](https://cve.now/CVE-2016-1275.md): Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote (no CVSS)
- [CVE-2016-1277](https://cve.now/CVE-2016-1277.md): Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D40, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9, 14.1 before 14.1R8, 14.1X53 (no CVSS)
- [CVE-2016-1279](https://cve.now/CVE-2016-1279.md): J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D25, 13.3 (no CVSS)
- [CVE-2016-1280](https://cve.now/CVE-2016-1280.md): PKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R12, 12.3X48 before 12. (no CVSS)
- [CVE-2016-4573](https://cve.now/CVE-2016-4573.md): Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, (no CVSS)
- [CVE-2016-6211](https://cve.now/CVE-2016-6211.md): The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom c (no CVSS, drupal/core · drupal/drupal)
- [CVE-2016-6212](https://cve.now/CVE-2016-6212.md): The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated user (no CVSS, drupal/core · drupal/drupal)
- [CVE-2016-7175](https://cve.now/CVE-2016-7175.md): epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote att (no CVSS)
- [CVE-2016-7176](https://cve.now/CVE-2016-7176.md): epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the outpu (no CVSS)
- [CVE-2016-7177](https://cve.now/CVE-2016-7177.md): epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of ch (no CVSS)
- [CVE-2016-7178](https://cve.now/CVE-2016-7178.md): epan/dissectors/packet-umts\_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain (no CVSS)
- [CVE-2016-7179](https://cve.now/CVE-2016-7179.md): Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 all (no CVSS)
- [CVE-2016-7180](https://cve.now/CVE-2016-7180.md): epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-09-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.