Skip to content
OpenAdvisories

Archive

13 July 2016

Vulnerabilities first published on this day (UTC), newest first.

← June 2016 2016 / July /13 August 2016 →
  1. 15
  2. 221
  3. 346
  4. 412
  5. 58
  6. 66
  7. 77
  8. 812
  9. 9 
  10. 10 
  11. 11100
  12. 1217
  13. 13131
  14. 14 
  15. 1527
  16. 16 
  17. 175
  18. 18 
  19. 1910
  20. 20 
  21. 21192
  22. 2268
  23. 2318
  24. 24 
  25. 2510
  26. 264
  27. 27 
  28. 2810
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2016-4974

    Improper Input Validation in Apache Qpid AMQP 0-x JMS

    Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and e…

    qpid-cpp org.apache.qpid:qpid-jms-client Ubuntu Maven
  • High 7.5
    CVE-2016-4216

    Moderate severity vulnerability that affects com.adobe.xmp:xmpcore

    XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

    com.adobe.xmp:xmpcore libxmpcore-java Ubuntu Maven
  • High 8.8
    CVE-2016-3269 EPSS 21%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 8.8
    CVE-2016-3248 EPSS 24%

    ChakraCore RCE Vulnerability

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corrup…

    Microsoft.ChakraCore NuGet
  • High 8.8
    CVE-2016-3260 EPSS 24%

    ChakraCore RCE Vulnerability

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via …

    Microsoft.ChakraCore NuGet
  • High 8.8
    CVE-2016-3265 EPSS 21%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • High 8.8
    CVE-2016-3259 EPSS 35%

    ChakraCore RCE Vulnerability

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corrup…

    Microsoft.ChakraCore NuGet