Skip to content
OpenAdvisories

Archive

3 February 2016

Vulnerabilities first published on this day (UTC), newest first.

← January 2016 2016 / February /3 March 2016 →
  1. 121
  2. 2 
  3. 312
  4. 42
  5. 52
  6. 66
  7. 720
  8. 827
  9. 94
  10. 1071
  11. 111
  12. 1214
  13. 1314
  14. 146
  15. 1530
  16. 1613
  17. 1727
  18. 1814
  19. 196
  20. 209
  21. 214
  22. 2227
  23. 236
  24. 243
  25. 257
  26. 262
  27. 278
  28. 2812
  29. 2912
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2015-8747

    Radicale vulnerable to arbitrary file read or write

    The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.

    radicale radicale Debian PyPI
  • Critical 9.8
    CVE-2015-5344

    Camel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands

    The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.

    org.apache.camel:camel-xstream Maven
  • Critical 10.0
    CVE-2016-1505

    Radicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component

    The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.

    radicale PyPI
  • Critical 9.8
    CVE-2016-1906

    Authorization bypass in Openshift

    Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed.

    kubernetes-1.35 kubernetes-1.34 kubernetes-1.36 kubernetes-1.37 Wolfi Go