Skip to content
OpenAdvisories

Archive

June 2016

Vulnerabilities first published in this month (UTC), newest first.

← May 2016 2016 / June July 2016 →
  1. 117
  2. 2 
  3. 38
  4. 49
  5. 536
  6. 61
  7. 721
  8. 840
  9. 912
  10. 1022
  11. 11 
  12. 12 
  13. 1374
  14. 146
  15. 15 
  16. 1694
  17. 176
  18. 183
  19. 1937
  20. 207
  21. 21 
  22. 22 
  23. 239
  24. 246
  25. 2514
  26. 2611
  27. 2714
  28. 283
  29. 2918
  30. 3042
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2016-3189 EPSS 16%

    Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash…

    bzip2 bzip2 bzip2 Debian Ubuntu Alpine
  • Medium 4.3
    CVE-2016-4911

    OpenStack Identity Keystone Improper Access Control

    The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) allows remote authenticated users to prevent revocation of a chain of tokens and bypass intended access restrictions by rescoping a token.

    keystone keystone Debian PyPI
  • Medium 6.1
    CVE-2016-3670 Public exploit

    Liferay Portal Vulnerable to XSS in Profile Search Functionality

    Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field.

    com.liferay:com.liferay.portal.search.web Maven
  • Medium 5.3
    CVE-2016-3093

    Denial of service in Apache Struts

    Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service (block access to a web site) via unspecified vectors.

    org.apache.struts:struts2-core ognl:ognl Maven
  • Medium 5.9
    CVE-2016-3094

    Improper Input Validation in org.apache.qpid:qpid-broker

    PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allows remote attackers to cause a denial of service (broker termination) via a crafted authentication attempt, which triggers an uncaught excep…

    qpid-cpp org.apache.qpid:qpid-broker Ubuntu Maven