Skip to content
OpenAdvisories

Archive

19 July 2016

Vulnerabilities first published on this day (UTC), newest first.

← June 2016 2016 / July /19 August 2016 →
  1. 15
  2. 221
  3. 346
  4. 412
  5. 58
  6. 66
  7. 77
  8. 812
  9. 9 
  10. 10 
  11. 11100
  12. 1217
  13. 13131
  14. 14 
  15. 1527
  16. 16 
  17. 175
  18. 18 
  19. 1910
  20. 20 
  21. 21192
  22. 2268
  23. 2318
  24. 24 
  25. 2510
  26. 264
  27. 27 
  28. 2810
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Unscored —
    CVE-2016-2775 EPSS 63%

    ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres optio…

    bind9 bind9 Debian Ubuntu
  • Unscored —
    CVE-2016-5653

    Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute ar…

  • Unscored —
    CVE-2016-5080 EPSS 10%

    Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allo…

  • Unscored —
    CVE-2016-5654

    Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that…

  • Unscored —
    CVE-2016-5655

    Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle atta…

  • Unscored —
    CVE-2015-8947

    hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-r…

    harfbuzz harfbuzz Debian Ubuntu
  • Unscored —
    CVE-2016-5386

    Improper input validation in net/http and net/http/cgi

    The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow…

    golang stdlib golang-1.6 Ubuntu Azure Linux Go
  • Unscored —
    CVE-2016-5387 EPSS 56%

    The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from …

    apache2 apache2 apache2 Debian Ubuntu Alpine
  • High 8.1
    CVE-2016-5388 EPSS 51%

    Improper Access Control in Apache Tomcat

    Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might…

    tomcat8 tomcat7 tomcat6 org.apache.tomcat:tomcat-catalina Ubuntu Maven
  • High 8.1
    CVE-2016-5385 EPSS 50%

    HTTP Proxy header vulnerability

    PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redi…

    php5 php7.0 drupal/core guzzlehttp/guzzle Ubuntu Packagist