Skip to content
OpenAdvisories

Archive

7 June 2016

Vulnerabilities first published on this day (UTC), newest first.

← May 2016 2016 / June /7 July 2016 →
  1. 117
  2. 2 
  3. 38
  4. 49
  5. 536
  6. 61
  7. 721
  8. 840
  9. 912
  10. 1022
  11. 11 
  12. 12 
  13. 1374
  14. 146
  15. 15 
  16. 1694
  17. 176
  18. 183
  19. 1937
  20. 207
  21. 21 
  22. 22 
  23. 239
  24. 246
  25. 2514
  26. 2611
  27. 2714
  28. 283
  29. 2918
  30. 3042
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2016-3087 Public exploit EPSS 82%

    Apache Struts vulnerable to arbitrary remote code execution due to improper input validation

    Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via vectors related to an ! (exclamation mark) operator to the REST Plugin.

    org.apache.struts:struts2-core Maven
  • Critical 9.8
    CVE-2015-7695

    Zend Framework SQL injection vector using null byte for PDO

    The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.

    zendframework/zendframework1 zend-framework Ubuntu Packagist
  • Critical 9.8
    CVE-2016-4437 Exploited Public exploit Scanner template EPSS 93%

    Improper Access Control in Apache Shiro

    Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

    shiro shiro org.apache.shiro:shiro-core Debian Ubuntu Maven
    KEV Nov 3, 2021