Skip to content
OpenAdvisories

Archive

13 April 2016

Vulnerabilities first published on this day (UTC), newest first.

← March 2016 2016 / April /13 May 2016 →
  1. 16
  2. 2 
  3. 3 
  4. 46
  5. 56
  6. 622
  7. 736
  8. 831
  9. 923
  10. 10 
  11. 1140
  12. 1275
  13. 1354
  14. 1421
  15. 1519
  16. 162
  17. 17 
  18. 1855
  19. 1914
  20. 2010
  21. 21118
  22. 2229
  23. 23 
  24. 24 
  25. 2529
  26. 265
  27. 2728
  28. 285
  29. 29 
  30. 3019
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2015-8806

    Denial of service or RCE from libxml2 and libxslt

    dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.

    libxml2 libxml2 nokogiri Debian Ubuntu RubyGems
  • High 8.8
    CVE-2016-3069

    Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository

    Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.

    mercurial mercurial mercurial Debian Ubuntu PyPI
  • High 8.8
    CVE-2016-3068

    Mercurial arbitrary code execution via a crafted git ext:: URL

    Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.

    mercurial mercurial mercurial Debian Ubuntu PyPI
  • High 8.8
    CVE-2016-3630

    Mercurial arbitrary code execution vulnerability

    The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records.

    mercurial mercurial mercurial Debian Ubuntu PyPI
  • High 7.5
    CVE-2016-2515

    Regular Expression Denial of Service in hawk

    Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attackers to cause a denial of service (CPU consumption or partial outage) via a long (1) header or (2) URI that is matched against an improper regular expression.

    hawk npm