Skip to content
OpenAdvisories

Archive

August 2016

Vulnerabilities first published in this month (UTC), newest first.

← July 2016 2016 / August September 2016 →
  1. 114
  2. 214
  3. 39
  4. 4 
  5. 584
  6. 673
  7. 750
  8. 827
  9. 932
  10. 106
  11. 11 
  12. 127
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 186
  19. 1917
  20. 20 
  21. 21 
  22. 2211
  23. 235
  24. 247
  25. 258
  26. 2619
  27. 27 
  28. 28 
  29. 291
  30. 306
  31. 3113
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.4
    CVE-2016-7119

    Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN)

    Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element.

    DotNetNuke.Core NuGet
  • Medium 5.5
    CVE-2016-4655 Exploited Public exploit EPSS 33%

    The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

    KEV May 24, 2022
  • Medium 6.1
    CVE-2016-3089

    Apache OpenMeetings Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter.

    org.apache.openmeetings:openmeetings-parent Maven
  • Medium 5.4
    CVE-2016-0782

    Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ

    The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memor…

    activemq org.apache.activemq:activemq-client Debian Maven
  • Medium 6.1
    CVE-2016-6186 Public exploit

    Django Cross-site scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject ar…

    python-django django python-django Debian Ubuntu PyPI
  • Medium 5.5
    CVE-2016-5000

    Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability

    The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

    libapache-poi-java libapache-poi-java org.apache.poi:poi-examples Debian Ubuntu Maven