# CVEs published 2016-09-21

43 CVEs were published on September 21, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-3632](https://cve.now/CVE-2016-3632.md): The \_TIFFVGetField function in tif\_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bound (no CVSS)
- [CVE-2016-3945](https://cve.now/CVE-2016-3945.md): Multiple integer overflows in the (1) cvt\_by\_strip and (2) cvt\_by\_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b (no CVSS)
- [CVE-2016-3990](https://cve.now/CVE-2016-3990.md): Heap-based buffer overflow in the horizontalDifference8 function in tif\_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to c (no CVSS)
- [CVE-2016-3991](https://cve.now/CVE-2016-3991.md): Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a de (no CVSS)
- [CVE-2016-4464](https://cve.now/CVE-2016-4464.md): The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against c (no CVSS, org.apache.cxf.fediz:fediz-spring · org.apache.cxf.fediz:fe…)
- [CVE-2015-8871](https://cve.now/CVE-2015-8871.md): Use-after-free vulnerability in the opj\_j2k\_write\_mco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified (no CVSS)
- [CVE-2016-4300](https://cve.now/CVE-2016-4300.md): Integer overflow in the read\_SubStreamsInfo function in archive\_read\_support\_format\_7zip.c in libarchive before 3.2.1 allows remote attacker (no CVSS)
- [CVE-2016-4301](https://cve.now/CVE-2016-4301.md): Stack-based buffer overflow in the parse\_device function in archive\_read\_support\_format\_mtree.c in libarchive before 3.2.1 allows remote att (no CVSS)
- [CVE-2016-4302](https://cve.now/CVE-2016-4302.md): Heap-based buffer overflow in the parse\_codes function in archive\_read\_support\_format\_rar.c in libarchive before 3.2.1 allows remote attacke (no CVSS)
- [CVE-2016-4809](https://cve.now/CVE-2016-4809.md): The archive\_read\_format\_cpio\_read\_header function in archive\_read\_support\_format\_cpio.c in libarchive before 3.2.1 allows remote attackers t (no CVSS)
- [CVE-2016-4965](https://cve.now/CVE-2016-4965.md): Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute (no CVSS)
- [CVE-2016-4966](https://cve.now/CVE-2016-4966.md): The diagnosis\_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP fi (no CVSS)
- [CVE-2016-4967](https://cve.now/CVE-2016-4967.md): Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to obtain sensitive information from (1) a backup of (no CVSS)
- [CVE-2016-4968](https://cve.now/CVE-2016-4968.md): The linkreport/tmp/admin\_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to discover a (no CVSS)
- [CVE-2016-4969](https://cve.now/CVE-2016-4969.md): Cross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2016-5017](https://cve.now/CVE-2016-5017.md): Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows (no CVSS)
- [CVE-2016-5418](https://cve.now/CVE-2016-5418.md): The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote atta (no CVSS)
- [CVE-2016-5426](https://cve.now/CVE-2016-5426.md): PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a (no CVSS)
- [CVE-2016-5427](https://cve.now/CVE-2016-5427.md): PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (no CVSS)
- [CVE-2016-5844](https://cve.now/CVE-2016-5844.md): Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a (no CVSS)
- [CVE-2016-6158](https://cve.now/CVE-2016-6158.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow rem (no CVSS)
- [CVE-2016-6159](https://cve.now/CVE-2016-6159.md): The management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allows remote attackers to bypass authentic (no CVSS)
- [CVE-2016-6250](https://cve.now/CVE-2016-6250.md): Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) o (no CVSS)
- [CVE-2016-6354](https://cve.now/CVE-2016-6354.md): Heap-based buffer overflow in the yy\_get\_next\_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial (no CVSS)
- [CVE-2016-6801](https://cve.now/CVE-2016-6801.md): Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, (no CVSS, org.apache.jackrabbit:jackrabbit-webdav)
- [CVE-2016-7092](https://cve.now/CVE-2016-7092.md): The get\_page\_from\_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors (no CVSS)
- [CVE-2016-7093](https://cve.now/CVE-2016-7093.md): Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges (no CVSS)
- [CVE-2016-7094](https://cve.now/CVE-2016-7094.md): Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial (no CVSS)
- [CVE-2016-7143](https://cve.now/CVE-2016-7143.md): The m\_authenticate function in modules/m\_sasl.c in Charybdis before 3.5.3 allows remote attackers to spoof certificate fingerprints and cons (no CVSS)
- [CVE-2016-7154](https://cve.now/CVE-2016-7154.md): Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service ( (no CVSS)
- [CVE-2016-7163](https://cve.now/CVE-2016-7163.md): Integer overflow in the opj\_pi\_create\_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP (no CVSS)
- [CVE-2016-7166](https://cve.now/CVE-2016-7166.md): libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (m (no CVSS)
- [CVE-2015-8960](https://cve.now/CVE-2015-8960.md): The TLS protocol 1.2 and earlier supports the rsa\_fixed\_dh, dss\_fixed\_dh, rsa\_fixed\_ecdh, and ecdsa\_fixed\_ecdh values for ClientCertificateT (no CVSS)
- [CVE-2016-0903](https://cve.now/CVE-2016-0903.md): Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which all (no CVSS)
- [CVE-2016-0904](https://cve.now/CVE-2016-0904.md): Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use the same encryption key across different (no CVSS)
- [CVE-2016-0905](https://cve.now/CVE-2016-0905.md): Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root privileges b (no CVSS)
- [CVE-2016-0917](https://cve.now/CVE-2016-0917.md): The SMB service in EMC VNXe (VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100/3150/3300 Operating Environment prior to 2.4 (no CVSS)
- [CVE-2016-0920](https://cve.now/CVE-2016-0920.md): Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root access via a (no CVSS)
- [CVE-2016-0921](https://cve.now/CVE-2016-0921.md): Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use weak permissions for unspecified director (no CVSS)
- [CVE-2016-0925](https://cve.now/CVE-2016-0925.md): Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premise) before 6.0.2.1.S (no CVSS)
- [CVE-2016-4382](https://cve.now/CVE-2016-4382.md): HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restrictions via unspecified (no CVSS)
- [CVE-2016-4384](https://cve.now/CVE-2016-4384.md): HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors. (no CVSS)
- [CVE-2016-6530](https://cve.now/CVE-2016-6530.md): Dentsply Sirona (formerly Schick) CDR Dicom 5 and earlier has default passwords for the sa and cdr accounts, which allows remote attackers t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-09-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.