Skip to content
OpenAdvisories

Archive

27 September 2016

Vulnerabilities first published on this day (UTC), newest first.

9 results · Feed

  • Unscored —

    The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enab…

  • Unscored —

    OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticate…

  • Unscored —

    The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not veri…

  • Unscored —

    The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a de…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Huawei Policy Center before V100R003C10SPC020 allows remote authenticated u…

  • High 7.2

    Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain

    The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Art…

  • Unscored —

    An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unkno…

  • Unscored —

    The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecif…

  • Unscored —
    CVE-2016-6330 EPSS 11%

    The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent …