Archive

10 June 2016

Vulnerabilities first published on this day (UTC), newest first.

← May 2016 2016 / June /10 July 2016 →

117
2
38
49
536
61
721
840
912
1022
11
12
1374
146
15
1694
176
183
1937
207
21
22
239
246
2514
2611
2714
283
2918
3042

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2016-3720

jackson-dataformat-xml vulnerable to XML external entity (XXE)

XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

jackson-dataformat-xml com.fasterxml.jackson.dataformat:jackson-dataformat-xml jackson-dataformat-xml Debian Ubuntu Maven

Jun 10, 2016
Critical 9.8

CVE-2016-2785

Puppet Improper Access Control

Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access restrictions by leveraging incorrect URL decoding.

puppet RubyGems

Jun 10, 2016