Skip to content
OpenAdvisories

Archive

11 April 2016

Vulnerabilities first published on this day (UTC), newest first.

← March 2016 2016 / April /11 May 2016 →
  1. 16
  2. 2 
  3. 3 
  4. 46
  5. 56
  6. 622
  7. 736
  8. 831
  9. 923
  10. 10 
  11. 1140
  12. 1275
  13. 1354
  14. 1421
  15. 1519
  16. 162
  17. 17 
  18. 1855
  19. 1914
  20. 2010
  21. 21118
  22. 2229
  23. 23 
  24. 24 
  25. 2529
  26. 265
  27. 2728
  28. 285
  29. 29 
  30. 3019
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2015-8710 Public exploit

    The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a deni…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2015-8399 Public exploit Scanner template EPSS 60%

    Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName …

  • Unscored —
    CVE-2015-8398 Public exploit

    Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2016-2385 Public exploit EPSS 29%

    Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER …

    kamailio kamailio Debian Ubuntu
  • High 8.8
    CVE-2016-0710 Public exploit EPSS 52%

    Apache Jetspeed vulnerable to SQL Injection

    Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1) role or (2) user parameter to services/usermanager/users/.

    org.apache.portals.jetspeed-2:jetspeed Maven
  • Medium 6.5
    CVE-2016-0784 Public exploit EPSS 55%

    Apache OpenMeetings Directory Traversal vulnerability

    Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. (dot dot) in a ZIP archive entry.

    org.apache.openmeetings:openmeetings-install Maven
  • High 7.2
    CVE-2016-0709 Public exploit EPSS 77%

    Path Traversal in Apache Jetspeed

    Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and consequently execute arbitrary code, via a .. (dot dot) in a…

    org.apache.portals.jetspeed-2:jetspeed Maven