Skip to content
OpenAdvisories

Archive

26 April 2016

Vulnerabilities first published on this day (UTC), newest first.

← March 2016 2016 / April /26 May 2016 →
  1. 16
  2. 2 
  3. 3 
  4. 46
  5. 56
  6. 622
  7. 736
  8. 831
  9. 923
  10. 10 
  11. 1140
  12. 1275
  13. 1354
  14. 1421
  15. 1519
  16. 162
  17. 17 
  18. 1855
  19. 1914
  20. 2010
  21. 21118
  22. 2229
  23. 23 
  24. 24 
  25. 2529
  26. 265
  27. 2728
  28. 285
  29. 29 
  30. 3019
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Unscored —
    CVE-2016-1601

    yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc…

  • Unscored —
    CVE-2016-4002

    Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept…

    qemu qemu Debian Ubuntu
  • High 8.1
    CVE-2016-3081 Exploited Public exploit Scanner template EPSS 97%

    Apache Struts RCE Vulnerability

    Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.

    org.apache.struts:struts2-core Maven
    KEV Oct 8, 2026
  • Critical 9.8
    CVE-2016-3082 EPSS 19%

    Remote Code Execution in Apache Struts

    XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1 allows remote attackers to execute arbitrary code via the stylesheet location parameter.

    org.apache.struts:struts2-core Maven
  • Unscored —
    CVE-2016-3074 Public exploit EPSS 36%

    Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial o…

    libgd2 libgd2 gd Debian Ubuntu Alpine