Skip to content
OpenAdvisories

Archive

1 March 2016

Vulnerabilities first published on this day (UTC), newest first.

← February 2016 2016 / March /1 April 2016 →
  1. 16
  2. 24
  3. 319
  4. 414
  5. 5 
  6. 616
  7. 7 
  8. 8 
  9. 953
  10. 10 
  11. 11 
  12. 1249
  13. 1347
  14. 145
  15. 152
  16. 165
  17. 174
  18. 1811
  19. 194
  20. 20 
  21. 211
  22. 224
  23. 23 
  24. 2462
  25. 251
  26. 267
  27. 27 
  28. 284
  29. 298
  30. 302
  31. 312
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2016-2562

    phpMyAdmin Improper Input Validation

    The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a …

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Medium 5.4
    CVE-2016-2559

    phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser

    Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query.

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist