Skip to content
OpenAdvisories

Archive

21 September 2016

Vulnerabilities first published on this day (UTC), newest first.

← August 2016 2016 / September /21 October 2016 →
  1. 116
  2. 219
  3. 38
  4. 4 
  5. 5 
  6. 66
  7. 737
  8. 84
  9. 914
  10. 101
  11. 1161
  12. 1224
  13. 13 
  14. 1476
  15. 15 
  16. 1615
  17. 1716
  18. 1828
  19. 199
  20. 2022
  21. 2143
  22. 2230
  23. 23 
  24. 2411
  25. 2577
  26. 2657
  27. 279
  28. 283
  29. 296
  30. 305
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High —
    CVE-2016-4464

    High severity vulnerability that affects org.apache.cxf.fediz:fediz-spring and org.apache.cxf.fediz:fediz-spring2

    The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against configured audience URIs, which might allow remote attackers to have bypass intended restrictions and have unspecified o…

    org.apache.cxf.fediz:fediz-spring2 org.apache.cxf.fediz:fediz-spring Maven
  • High 8.8
    CVE-2016-6801

    Apache Jackrabbit Authentication Hijacking Vulnerability

    Cross-site request forgery (CSRF) vulnerability in the CSRF content-type check in Jackrabbit-Webdav in Apache Jackrabbit 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.3, 2.10.x before 2.10.4, 2.12.x before 2.12.4, and 2.13.x before 2.13.3 allows re…

    jackrabbit jackrabbit org.apache.jackrabbit:jackrabbit-webdav Debian Ubuntu Maven