Archive

July 2016

Vulnerabilities first published in this month (UTC), newest first.

← June 2016 2016 / July August 2016 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2016-4438 Public exploit EPSS 17%

Arbitrary code execution in Apache Struts 2

The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression.

org.apache.struts:struts2-core org.apache.struts:struts2-rest-plugin Maven

Jul 4, 2016
Critical 9.8

CVE-2016-5734 Public exploit EPSS 81%

phpMyAdmin Code Injection vulnerability

phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier, which might allow remote attackers to execute arbitrary PHP code via a crafted strin…

phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist

Jul 3, 2016