Skip to content
OpenAdvisories

Archive

7 April 2016

Vulnerabilities first published on this day (UTC), newest first.

← March 2016 2016 / April /7 May 2016 →
  1. 16
  2. 2 
  3. 3 
  4. 46
  5. 56
  6. 622
  7. 736
  8. 831
  9. 923
  10. 10 
  11. 1140
  12. 1275
  13. 1354
  14. 1421
  15. 1519
  16. 162
  17. 17 
  18. 1855
  19. 1914
  20. 2010
  21. 21118
  22. 2229
  23. 23 
  24. 24 
  25. 2529
  26. 265
  27. 2728
  28. 285
  29. 29 
  30. 3019
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2016-0792 Public exploit EPSS 83%

    Jenkins allows Deserialization of Untrusted Data via an XML File

    Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file, related to XStream and groovy.util.Expando.

    org.jenkins-ci.main:jenkins-core Maven
  • Unscored —
    CVE-2016-1531 Public exploit

    Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.

    exim4 exim4 Debian Ubuntu
  • High 7.5
    CVE-2016-3976 Exploited Public exploit EPSS 47%

    Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary fi…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2016-2563 Public exploit EPSS 33%

    Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows …

    putty Debian
  • Unscored —
    CVE-2016-2851 Public exploit EPSS 24%

    Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of ser…

    libotr libotr Debian Ubuntu
  • High 7.3
    CVE-2016-2098 Public exploit EPSS 81%

    actionpack allows remote code execution via application's unrestricted use of render method

    Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.

    rails actionpack Debian RubyGems
  • Unscored —
    CVE-2016-3974 Public exploit EPSS 14%

    XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows rem…