# CVEs published 2016-10-27 18 CVEs were published on October 27, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2016-1000120](https://cve.now/CVE-2016-1000120.md): SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla (no CVSS) - [CVE-2016-1000121](https://cve.now/CVE-2016-1000121.md): XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension (no CVSS) - [CVE-2016-1000122](https://cve.now/CVE-2016-1000122.md): XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension (no CVSS) - [CVE-2016-6431](https://cve.now/CVE-2016-6431.md): A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated, remote (no CVSS, Cisco ASA Software before) - [CVE-2016-6432](https://cve.now/CVE-2016-6432.md): A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to ca (no CVSS, Cisco ASA Software before) - [CVE-2016-6437](https://cve.now/CVE-2016-6437.md): A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote at (no CVSS, Cisco Wide Area Application Services (WAAS) before 5.3(5g)1…) - [CVE-2016-6438](https://cve.now/CVE-2016-6438.md): A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker (no CVSS, Cisco IOS XE 3.16S, 3.17S, 3.18.0S, 3.18.1S, 3.18.0SP) - [CVE-2016-6439](https://cve.now/CVE-2016-6439.md): A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthent (no CVSS, Cisco Firepower System Software before) - [CVE-2016-6440](https://cve.now/CVE-2016-6440.md): The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within a web page, which in (no CVSS, Cisco Unified Communications Manager 11.0(1.10000.10), 11.5…) - [CVE-2016-6442](https://cve.now/CVE-2016-6442.md): A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-si (no CVSS, Cisco Finesse) - [CVE-2016-6443](https://cve.now/CVE-2016-6443.md): A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticat (no CVSS, Cisco Prime Infrastructure and Evolved Programmable Network…) - [CVE-2016-6444](https://cve.now/CVE-2016-6444.md): A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attac (no CVSS, Cisco Meeting Server 1.8, 1.9,) - [CVE-2016-6445](https://cve.now/CVE-2016-6445.md): A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Se (no CVSS, Cisco Meeting Server (CMS) before 2.0.6 and Acano Server be…) - [CVE-2016-6446](https://cve.now/CVE-2016-6446.md): A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected s (no CVSS, Cisco Meeting Server 1.8, 1.9,) - [CVE-2015-0787](https://cve.now/CVE-2015-0787.md): XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the accessMgrDN value of t (no CVSS, NetIQ Designer for Identity Manager before) - [CVE-2016-1592](https://cve.now/CVE-2016-1592.md): XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.d (no CVSS, NetIQ Designer for Identity Manager before) - [CVE-2016-1598](https://cve.now/CVE-2016-1598.md): XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into th (no CVSS, NetIQ IDM 4.5 Identity Applications before) - [CVE-2016-5764](https://cve.now/CVE-2016-5764.md): Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. (no CVSS, Micro Focus Rumba FTP 4.X before) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-10-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.