# CVEs published 2016-09-28

3 CVEs were published on September 28, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-7191](https://cve.now/CVE-2016-7191.md): The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not rec (no CVSS, passport-azure-ad)
- [CVE-2016-7568](https://cve.now/CVE-2016-7568.md): Integer overflow in the gdImageWebpCtx function in gd\_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7. (no CVSS)
- [CVE-2016-2776](https://cve.now/CVE-2016-2776.md): buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-09-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.