Skip to content
OpenAdvisories

Archive

January 2016

Vulnerabilities first published in this month (UTC), newest first.

← December 2015 2016 / January February 2016 →
  1. 112
  2. 227
  3. 316
  4. 433
  5. 510
  6. 613
  7. 7 
  8. 847
  9. 916
  10. 105
  11. 1110
  12. 1224
  13. 1328
  14. 1420
  15. 1540
  16. 167
  17. 177
  18. 188
  19. 1911
  20. 2013
  21. 21216
  22. 2215
  23. 232
  24. 24 
  25. 2511
  26. 2612
  27. 2715
  28. 281
  29. 2919
  30. 3015
  31. 3116
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.3
    CVE-2015-7521

    High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service

    The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, allows attackers to bypass intended parent table access restrictions via unspecified partition-level operation…

    org.apache.hive:hive-exec org.apache.hive:hive org.apache.hive:hive-service Maven
  • High 7.5
    CVE-2016-0737

    OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

    OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.

    swift swift swift Debian Ubuntu PyPI
  • High 7.5
    CVE-2016-0738

    OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

    OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted …

    swift swift swift Debian Ubuntu PyPI
  • High 8.8
    CVE-2015-8379

    CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter

    CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method parameter.

    cakephp/cakephp cakephp Debian Packagist
  • High 8.1
    CVE-2016-0778 EPSS 21%

    The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x bef…

    openssh openssh Debian Ubuntu
  • High 8.8
    CVE-2016-0024 EPSS 17%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability."

    Microsoft.ChakraCore NuGet
  • High 8.8
    CVE-2016-0034 Exploited · Ransomware EPSS 69%

    Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers t…

    KEV May 25, 2022