Skip to content
OpenAdvisories

Archive

11 April 2016

Vulnerabilities first published on this day (UTC), newest first.

← March 2016 2016 / April /11 May 2016 →
  1. 16
  2. 2 
  3. 3 
  4. 46
  5. 56
  6. 622
  7. 736
  8. 831
  9. 923
  10. 10 
  11. 1140
  12. 1275
  13. 1354
  14. 1421
  15. 1519
  16. 162
  17. 17 
  18. 1855
  19. 1914
  20. 2010
  21. 21118
  22. 2229
  23. 23 
  24. 24 
  25. 2529
  26. 265
  27. 2728
  28. 285
  29. 29 
  30. 3019
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2015-7528

    Information Exposure in Kubernetes

    Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name.

    github.com/kubernetes/kubernetes Go
  • Medium 6.1
    CVE-2015-0265

    Apache Ranger Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header.

    org.apache.ranger:ranger Maven
  • Medium 6.1
    CVE-2016-0711

    Apache Jetspeed vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a (1) link, (2) page, or (3) folder resource.

    org.apache.portals.jetspeed-2:jetspeed-commons Maven
  • Medium 6.5
    CVE-2016-0784 Public exploit EPSS 55%

    Apache OpenMeetings Directory Traversal vulnerability

    Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. (dot dot) in a ZIP archive entry.

    org.apache.openmeetings:openmeetings-install Maven
  • Medium 6.1
    CVE-2016-0712

    Cross-site Scripting in Apache Jetspeed

    Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal.

    org.apache.portals.jetspeed-2:jetspeed Maven
  • Medium 6.1
    CVE-2016-2163

    Apache OpenMeetings Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating an event.

    org.apache.openmeetings:openmeetings-parent Maven