Skip to content
OpenAdvisories

Archive

March 2016

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2016-3115 Public exploit EPSS 36%

    Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users t…

  • Medium 6.1
    CVE-2016-2279 Public exploit

    Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* be…

  • Medium 6.8

    phpMyAdmin Improper Input Validation

    The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a …

  • Medium 5.4

    phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser

    Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query.