Skip to content
OpenAdvisories

Archive

5 August 2016

Vulnerabilities first published on this day (UTC), newest first.

  1. 114
  2. 214
  3. 39
  4. 4 
  5. 584
  6. 673
  7. 750
  8. 827
  9. 932
  10. 106
  11. 11 
  12. 127
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 186
  19. 1917
  20. 20 
  21. 21 
  22. 2211
  23. 235
  24. 247
  25. 258
  26. 2619
  27. 27 
  28. 28 
  29. 291
  30. 306
  31. 3113

3 results · Clear filters · Feed

  • Medium 5.4

    Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

    The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memor…

  • Medium 6.1
    CVE-2016-6186 Public exploit

    Django Cross-site scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject ar…

  • Medium 5.5

    Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability

    The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.