# CVEs published 2016-11-03 22 CVEs were published on November 3, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2016-6429](https://cve.now/CVE-2016-6429.md): A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an unauthenticated, (no CVSS, Cisco IP Interoperability and Collaboration System) - [CVE-2016-6430](https://cve.now/CVE-2016-6430.md): A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an authenticated (no CVSS, Cisco IP Interoperability and Collaboration System before) - [CVE-2016-6441](https://cve.now/CVE-2016-6441.md): A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to (no CVSS, Cisco IOS XE 3.17 and) - [CVE-2016-6447](https://cve.now/CVE-2016-6447.md): A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affe (no CVSS, Cisco Meeting Server before 2.0.1, Acano Server before 1.9.…) - [CVE-2016-6448](https://cve.now/CVE-2016-6448.md): A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to (no CVSS, Cisco Meeting Server before 2.0.3 and Acano Server before) - [CVE-2016-6451](https://cve.now/CVE-2016-6451.md): Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote atta (no CVSS, Cisco Prime Collaboration Provisioning) - [CVE-2016-6452](https://cve.now/CVE-2016-6452.md): A vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow an unauthenticated, remote attacker to bypas (no CVSS, Cisco Prime Home before) - [CVE-2016-6453](https://cve.now/CVE-2016-6453.md): A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute a (no CVSS, Cisco Identity Services Engine) - [CVE-2016-6454](https://cve.now/CVE-2016-6454.md): A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application c (no CVSS, Cisco Hosted Collaboration Mediation Fulfillment before) - [CVE-2016-6455](https://cve.now/CVE-2016-6455.md): A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2) could allow an unauthenticate (no CVSS, Cisco StarOS 18.x through 21.x) - [CVE-2015-8968](https://cve.now/CVE-2015-8968.md): git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. (no CVSS, git-fastclone ruby gem All versions before · git-fastclone) - [CVE-2015-8969](https://cve.now/CVE-2015-8969.md): git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. (no CVSS, git-fastclone ruby gem All versions before · git-fastclone) - [CVE-2016-4025](https://cve.now/CVE-2016-4025.md): Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protect (no CVSS) - [CVE-2016-7095](https://cve.now/CVE-2016-7095.md): Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprote (no CVSS) - [CVE-2016-7160](https://cve.now/CVE-2016-7160.md): A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not properly restricted, leading t (no CVSS) - [CVE-2016-7402](https://cve.now/CVE-2016-7402.md): SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system admini (no CVSS) - [CVE-2016-7452](https://cve.now/CVE-2016-7452.md): The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cp (no CVSS) - [CVE-2016-7453](https://cve.now/CVE-2016-7453.md): The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection. (no CVSS) - [CVE-2016-9086](https://cve.now/CVE-2016-9086.md): GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. (no CVSS) - [CVE-2016-9134](https://cve.now/CVE-2016-9134.md): Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting the order parameter. (no CVSS) - [CVE-2016-9135](https://cve.now/CVE-2016-9135.md): Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the vers (no CVSS) - [CVE-2016-9136](https://cve.now/CVE-2016-9136.md): Artifex Software, Inc. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-11-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.