Skip to content
OpenAdvisories

Archive

12 July 2016

Vulnerabilities first published on this day (UTC), newest first.

← June 2016 2016 / July /12 August 2016 →
  1. 15
  2. 221
  3. 346
  4. 412
  5. 58
  6. 66
  7. 77
  8. 812
  9. 9 
  10. 10 
  11. 11100
  12. 1217
  13. 13131
  14. 14 
  15. 1527
  16. 16 
  17. 175
  18. 18 
  19. 1910
  20. 20 
  21. 21192
  22. 2268
  23. 2318
  24. 24 
  25. 2510
  26. 264
  27. 27 
  28. 2810
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Medium 5.5
    CVE-2015-3192

    Pivotal Spring Framework DoS Attack with XML Input

    Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a craft…

    libspring-java libspring-java org.springframework:spring-web Debian Ubuntu Maven
  • Unscored —
    CVE-2016-4994

    Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to ca…

    gimp gimp Debian Ubuntu
  • Medium 5.4
    CVE-2016-4428

    OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.

    horizon horizon horizon Debian Ubuntu PyPI
  • High 7.5
    CVE-2016-4985

    OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor

    The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node…

    ironic ironic ironic Debian Ubuntu PyPI
  • Unscored —
    CVE-2016-6174 Public exploit EPSS 12%

    applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power B…

  • Unscored —
    CVE-2016-2219

    Cross-site scripting (XSS) vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allo…

  • Unscored —
    CVE-2016-5009

    The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (s…

    ceph ceph Debian Ubuntu
  • Unscored —
    CVE-2016-5850

    Cross-site scripting (XSS) vulnerability in the volume backup service module in Huawei Public Cloud Solution before 1.0…

  • Unscored —
    CVE-2016-5774

    The HTTPS server in Blue Coat PacketShaper S-Series 11.5.x before 11.5.3.2 might allow remote attackers to obtain sensi…

  • Unscored —
    CVE-2016-1445

    Cisco Adaptive Security Appliance (ASA) Software 8.2 through 9.4.3.3 allows remote attackers to bypass intended ICMP Ec…

  • Unscored —
    CVE-2016-4831

    Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain …

  • Unscored —
    CVE-2016-4533 EPSS 13%

    Heap-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file.

  • Unscored —
    CVE-2016-4503

    Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify setting…

  • Unscored —
    CVE-2016-2206

    The management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Syma…

  • Unscored —
    CVE-2016-2205

    Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspa…

  • Unscored —
    CVE-2016-5781 EPSS 16%

    Stack-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file.

  • Unscored —
    CVE-2016-5308

    The Client Intrusion Detection System (CIDS) driver before 15.0.6 in Symantec Endpoint Protection (SEP) and before 15.1…