Skip to content
OpenAdvisories

Archive

7 June 2016

Vulnerabilities first published on this day (UTC), newest first.

← May 2016 2016 / June /7 July 2016 →
  1. 117
  2. 2 
  3. 38
  4. 49
  5. 536
  6. 61
  7. 721
  8. 840
  9. 912
  10. 1022
  11. 11 
  12. 12 
  13. 1374
  14. 146
  15. 15 
  16. 1694
  17. 176
  18. 183
  19. 1937
  20. 207
  21. 21 
  22. 22 
  23. 239
  24. 246
  25. 2514
  26. 2611
  27. 2714
  28. 283
  29. 2918
  30. 3042
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2016-3072

    Katello SQL Injection vulnerabilities

    Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb in Katello allow remote authenticated users to execute arbitrary SQL commands via the (1) sort_by or (2) sort_order parameter.

    katello RubyGems
  • High 8.1
    CVE-2015-7611 Public exploit EPSS 69%

    Apache James Server OS Command Injection

    Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors.

    org.apache.james:james-server Maven
  • High 7.8
    CVE-2015-5723

    Doctrine Security Misconfiguration Vulnerability

    Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for …

    zendframework/zendframework1 zendframework/zendframework aws/aws-sdk-php doctrine/orm Debian Packagist