Skip to content
OpenAdvisories

Archive

27 February 2016

Vulnerabilities first published on this day (UTC), newest first.

8 results · Feed

  • Unscored —

    The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcode…

  • Unscored —

    QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated use…

  • Unscored —

    QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via …

  • Unscored —

    Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execut…

  • Unscored —

    http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-pars…

  • Unscored —
    CVE-2016-2572 EPSS 10%

    http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote …

  • Unscored —
    CVE-2016-2569 Public exploit EPSS 31%

    Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote serve…

  • Unscored —

    The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during…