Skip to content
OpenAdvisories

Archive

3 February 2016

Vulnerabilities first published on this day (UTC), newest first.

← January 2016 2016 / February /3 March 2016 →
  1. 121
  2. 2 
  3. 312
  4. 42
  5. 52
  6. 66
  7. 720
  8. 827
  9. 94
  10. 1071
  11. 111
  12. 1214
  13. 1314
  14. 146
  15. 1530
  16. 1613
  17. 1727
  18. 1814
  19. 196
  20. 209
  21. 214
  22. 2227
  23. 236
  24. 243
  25. 257
  26. 262
  27. 278
  28. 2812
  29. 2912
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2015-7537

    Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack

    Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method.

    org.jenkins-ci.main:jenkins-core Maven
  • High 8.8
    CVE-2015-7538

    Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack

    Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.

    org.jenkins-ci.main:jenkins-core Maven
  • High 7.5
    CVE-2015-7539

    Jenkins does not Verify Checksums for Plugin Files

    The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted plugin.

    org.jenkins-ci.main:jenkins-core Maven
  • High 7.5
    CVE-2015-7546

    OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials

    The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) before 1.5.4 (Kilo) and Liberty before 2.3.3 does not properly invalidate authorization token…

    keystone keystone python-keystonemiddleware keystonemiddleware Debian PyPI
  • High 7.7
    CVE-2016-1905

    Access Restriction Bypass in kubernetes

    The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object.

    kubernetes-1.35 kubernetes-1.34 kubernetes-1.36 kubernetes-1.37 Wolfi Go