# CVEs published 2016-11-19

13 CVEs were published on November 19, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-9149](https://cve.now/CVE-2016-9149.md): The Addresses Object parser in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x (no CVSS)
- [CVE-2016-9150](https://cve.now/CVE-2016-9150.md): Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x (no CVSS)
- [CVE-2016-9151](https://cve.now/CVE-2016-9151.md): Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x befor (no CVSS)
- [CVE-2016-6450](https://cve.now/CVE-2016-6450.md): A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access t (no CVSS, Cisco IOS XE 3.7(0) through Denali-16.3.1)
- [CVE-2016-6457](https://cve.now/CVE-2016-6457.md): A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) could allow an unauthenti (no CVSS, Cisco Nexus 9000 Series Platform Leaf Switches for Applicat…)
- [CVE-2016-6458](https://cve.now/CVE-2016-6458.md): A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthen (no CVSS, Cisco AsyncOS 10.0.0-125 and 9.7.1-066)
- [CVE-2016-6459](https://cve.now/CVE-2016-6459.md): Cisco TelePresence endpoints running either CE or TC software contain a vulnerability that could allow an authenticated, local attacker to e (no CVSS, Cisco TelePresence CE and TC 8.1.x)
- [CVE-2016-6460](https://cve.now/CVE-2016-6460.md): A vulnerability in the FTP Representational State Transfer Application Programming Interface (REST API) for Cisco Firepower System Software (no CVSS, Cisco Firepower System Software 5.4.0.2 through)
- [CVE-2016-6461](https://cve.now/CVE-2016-6461.md): A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, re (no CVSS, Cisco Adaptive Security Appliance (ASA))
- [CVE-2016-6462](https://cve.now/CVE-2016-6462.md): A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenti (no CVSS, Cisco AsyncOS 9.7.1-066 through 10.0.0-125)
- [CVE-2016-6463](https://cve.now/CVE-2016-6463.md): A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenti (no CVSS, Cisco AsyncOS 9.7.1-066 through 10.0.0-082)
- [CVE-2016-6466](https://cve.now/CVE-2016-6466.md): A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remote attacker to termin (no CVSS, Cisco StarOS 20.0.0 through 21.0.M0.64246)
- [CVE-2016-6472](https://cve.now/CVE-2016-6472.md): A vulnerability in several parameters of the ccmivr page of Cisco Unified Communication Manager (CallManager) could allow an unauthenticated (no CVSS, Cisco Unified Communication Manager)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-11-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.