Skip to content
OpenAdvisories

Archive

April 2016

Vulnerabilities first published in this month (UTC), newest first.

← March 2016 2016 / April May 2016 →
  1. 16
  2. 2 
  3. 3 
  4. 46
  5. 56
  6. 622
  7. 736
  8. 831
  9. 923
  10. 10 
  11. 1140
  12. 1275
  13. 1354
  14. 1421
  15. 1519
  16. 162
  17. 17 
  18. 1855
  19. 1914
  20. 2010
  21. 21118
  22. 2229
  23. 23 
  24. 24 
  25. 2529
  26. 265
  27. 2728
  28. 285
  29. 29 
  30. 3019
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2016-3082 EPSS 19%

    Remote Code Execution in Apache Struts

    XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1 allows remote attackers to execute arbitrary code via the stylesheet location parameter.

    org.apache.struts:struts2-core Maven
  • Critical 9.8
    CVE-2016-3427 Exploited EPSS 92%

    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows re…

    openjdk-8 openjdk-7 openjdk-6 Ubuntu
    KEV May 12, 2023
  • Critical 9.8
    CVE-2016-4009

    Pillow Integer overflow in ImagingResampleHorizontal

    Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.

    pillow pillow Debian PyPI
  • Critical 9.8
    CVE-2016-0733

    The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password

    The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username.

    org.apache.ranger:ranger Maven
  • Critical 9.8
    CVE-2016-0791

    Exposure of Sensitive Information in Jenkins Core

    Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force approach.

    org.jenkins-ci.main:jenkins-core Maven
  • Critical 9.8
    CVE-2016-0788 EPSS 12%

    Jenkins allows Execution of Code by Opening a JRMP Listener

    The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.

    org.jenkins-ci.main:jenkins-core Maven