Skip to content
OpenAdvisories

Archive

13 April 2016

Vulnerabilities first published on this day (UTC), newest first.

← March 2016 2016 / April /13 May 2016 →
  1. 16
  2. 2 
  3. 3 
  4. 46
  5. 56
  6. 622
  7. 736
  8. 831
  9. 923
  10. 10 
  11. 1140
  12. 1275
  13. 1354
  14. 1421
  15. 1519
  16. 162
  17. 17 
  18. 1855
  19. 1914
  20. 2010
  21. 21118
  22. 2229
  23. 23 
  24. 24 
  25. 2529
  26. 265
  27. 2728
  28. 285
  29. 29 
  30. 3019
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.3
    CVE-2016-0757

    OpenStack Image Service (Glance) vulnerable to Improper Access Control

    OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when show_multiple_locations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image.

    glance glance glance Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2016-0775

    Pillow Buffer overflow in ImagingFliDecode

    Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.

    pillow pillow pillow Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2016-0740

    Pillow Buffer overflow in ImagingLibTiffDecode

    Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.

    pillow pillow pillow Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2016-2533

    Pillow buffer overflow in ImagingPcdDecode

    Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PhotoCD file.

    pillow pillow pillow Debian Ubuntu PyPI
  • Medium 4.3
    CVE-2015-0861

    trytond arbitrary fields write via a sequence of records

    model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records.

    trytond tryton-server Debian PyPI
  • Medium 6.1
    CVE-2015-8606

    Silverstripe CMS XSS Vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.x before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Locale or (2) FailedLoginCount parameter to admin/security/EditF…

    silverstripe/cms Packagist
  • Medium 6.5
    CVE-2015-8553

    Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Medium 4.3
    CVE-2014-6276

    Roundup sensitive data disclosure vulnerability

    schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details.

    roundup roundup Ubuntu PyPI