# CVEs published 2016-12-15 58 CVEs were published on December 15, 2016: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2015-3271](https://cve.now/CVE-2015-3271.md): Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header. (no CVSS, org.apache.tika:tika-server) - [CVE-2016-9565](https://cve.now/CVE-2016-9565.md): MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files b (no CVSS) - [CVE-2016-9566](https://cve.now/CVE-2016-9566.md): base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a sy (no CVSS) - [CVE-2015-8542](https://cve.now/CVE-2015-8542.md): An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. (no CVSS) - [CVE-2016-2840](https://cve.now/CVE-2016-2840.md): An issue was discovered in Open-Xchange Server 6 / OX AppSuite before 7.8.0-rev26. (no CVSS) - [CVE-2016-3173](https://cve.now/CVE-2016-3173.md): An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. (no CVSS) - [CVE-2016-3174](https://cve.now/CVE-2016-3174.md): An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. (no CVSS) - [CVE-2016-4026](https://cve.now/CVE-2016-4026.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. (no CVSS) - [CVE-2016-4027](https://cve.now/CVE-2016-4027.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10. (no CVSS) - [CVE-2016-4028](https://cve.now/CVE-2016-4028.md): An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. (no CVSS) - [CVE-2016-4045](https://cve.now/CVE-2016-4045.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. (no CVSS) - [CVE-2016-4046](https://cve.now/CVE-2016-4046.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. (no CVSS) - [CVE-2016-4047](https://cve.now/CVE-2016-4047.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8. (no CVSS) - [CVE-2016-4048](https://cve.now/CVE-2016-4048.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. (no CVSS) - [CVE-2016-5124](https://cve.now/CVE-2016-5124.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev14. (no CVSS) - [CVE-2016-5740](https://cve.now/CVE-2016-5740.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. (no CVSS) - [CVE-2016-6842](https://cve.now/CVE-2016-6842.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. (no CVSS) - [CVE-2016-6843](https://cve.now/CVE-2016-6843.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. (no CVSS) - [CVE-2016-6844](https://cve.now/CVE-2016-6844.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. (no CVSS) - [CVE-2016-6845](https://cve.now/CVE-2016-6845.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. (no CVSS) - [CVE-2016-6847](https://cve.now/CVE-2016-6847.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. (no CVSS) - [CVE-2016-6848](https://cve.now/CVE-2016-6848.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. (no CVSS) - [CVE-2016-6850](https://cve.now/CVE-2016-6850.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. (no CVSS) - [CVE-2016-6851](https://cve.now/CVE-2016-6851.md): An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. (no CVSS) - [CVE-2016-6852](https://cve.now/CVE-2016-6852.md): An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. (no CVSS) - [CVE-2016-6853](https://cve.now/CVE-2016-6853.md): An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. (no CVSS) - [CVE-2016-6854](https://cve.now/CVE-2016-6854.md): An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. (no CVSS) - [CVE-2016-6933](https://cve.now/CVE-2016-6933.md): Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACCompone (no CVSS, Adobe Experience Manager Forms 6.2 and earlier, LiveCycle 1…) - [CVE-2016-6934](https://cve.now/CVE-2016-6934.md): Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the PMAdmin mo (no CVSS, Adobe Experience Manager Forms 6.2 and earlier, LiveCycle 1…) - [CVE-2016-7856](https://cve.now/CVE-2016-7856.md): Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability. (no CVSS, Adobe DNG Converter 9.7 and earlier) - [CVE-2016-7866](https://cve.now/CVE-2016-7866.md): Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. (no CVSS, Adobe Animate 15.2.1.95 and earlier) - [CVE-2016-7867](https://cve.now/CVE-2016-7867.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability i (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7868](https://cve.now/CVE-2016-7868.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability i (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7869](https://cve.now/CVE-2016-7869.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability i (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7870](https://cve.now/CVE-2016-7870.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability i (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7871](https://cve.now/CVE-2016-7871.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Work (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7872](https://cve.now/CVE-2016-7872.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieCl (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7873](https://cve.now/CVE-2016-7873.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7874](https://cve.now/CVE-2016-7874.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetC (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7875](https://cve.now/CVE-2016-7875.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the Bitma (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7876](https://cve.now/CVE-2016-7876.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Clip (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7877](https://cve.now/CVE-2016-7877.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the Action (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7878](https://cve.now/CVE-2016-7878.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7879](https://cve.now/CVE-2016-7879.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConn (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7880](https://cve.now/CVE-2016-7880.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability when setting t (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7881](https://cve.now/CVE-2016-7881.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieCl (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7882](https://cve.now/CVE-2016-7882.md): Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scr (no CVSS, Adobe Experience Manager 6.2 and earlier) - [CVE-2016-7883](https://cve.now/CVE-2016-7883.md): Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attack (no CVSS, Adobe Experience Manager) - [CVE-2016-7884](https://cve.now/CVE-2016-7884.md): Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site s (no CVSS, Adobe Experience Manager 6.1 and earlier) - [CVE-2016-7885](https://cve.now/CVE-2016-7885.md): Adobe Experience Manager versions 6.2 and earlier have a vulnerability that could be used in Cross-Site Request Forgery attacks. (no CVSS, Adobe Experience Manager 6.2 and earlier) - [CVE-2016-7886](https://cve.now/CVE-2016-7886.md): Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption vulnerability. (no CVSS, Adobe InDesign 11.4.1 and earlier, InDesign Server 11.0.0 a…) - [CVE-2016-7887](https://cve.now/CVE-2016-7887.md): Adobe ColdFusion Builder versions 2016 update 2 and earlier, 3.0.3 and earlier have an important vulnerability that could lead to informatio (no CVSS, Adobe ColdFusion Builder 2016 update 2 and earlier, 3.0.3 a…) - [CVE-2016-7888](https://cve.now/CVE-2016-7888.md): Adobe Digital Editions versions 4.5.2 and earlier has an important vulnerability that could lead to memory address leak. (no CVSS, Adobe Digital Editions 4.5.2 and earlier) - [CVE-2016-7889](https://cve.now/CVE-2016-7889.md): Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to information disclosure. (no CVSS, Adobe Digital Editions 4.5.2 and earlier) - [CVE-2016-7890](https://cve.now/CVE-2016-7890.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of the (no CVSS, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2016-7891](https://cve.now/CVE-2016-7891.md): Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripti (no CVSS, Adobe RoboHelp 2015.0.3 and earlier, RoboHelp 11 and earlier) - [CVE-2016-7892](https://cve.now/CVE-2016-7892.md): Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextFie (CVSS 8.8, KEV, Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…) - [CVE-2015-6574](https://cve.now/CVE-2015-6574.md): The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service (CPU consumpt (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-12-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.