Skip to content
OpenAdvisories

Archive

March 2016

Vulnerabilities first published in this month (UTC), newest first.

← February 2016 2016 / March April 2016 →
  1. 16
  2. 24
  3. 319
  4. 414
  5. 5 
  6. 616
  7. 7 
  8. 8 
  9. 953
  10. 10 
  11. 11 
  12. 1249
  13. 1347
  14. 145
  15. 152
  16. 165
  17. 174
  18. 1811
  19. 194
  20. 20 
  21. 211
  22. 224
  23. 23 
  24. 2462
  25. 251
  26. 267
  27. 27 
  28. 284
  29. 298
  30. 302
  31. 312
All Critical High Medium Low Exploited only Public exploit

330 results · Feed

  • Unscored —
    CVE-2016-2278 Public exploit EPSS 13%

    Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allow…

  • Medium 6.1
    CVE-2016-2279 Public exploit

    Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* be…

  • Unscored —
    CVE-2016-0703

    The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0…

    openssl Debian
  • Unscored —
    CVE-2016-0704

    An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSS…

    openssl Debian
  • Unscored —
    CVE-2016-2561

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x before 4.5.5.1 allow …

    phpmyadmin phpmyadmin Debian Ubuntu
  • Unscored —
    CVE-2016-2560

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.…

    phpmyadmin phpmyadmin Debian Ubuntu
  • Medium 6.8
    CVE-2016-2562

    phpMyAdmin Improper Input Validation

    The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a …

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Medium 5.4
    CVE-2016-2559

    phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser

    Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query.

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Unscored —
    CVE-2016-1353

    The TCP implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.3(0), 3.3(1), 4.0(0), a…

  • Unscored —
    CVE-2016-0800 Public exploit EPSS 82%

    The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to s…

    openssl nss Debian