Skip to content
OpenAdvisories

Archive

30 September 2016

Vulnerabilities first published on this day (UTC), newest first.

5 results · Feed

  • Unscored —

    Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via u…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbit…

  • Critical 9.6

    Cloud Foundry vulnerable to Cross-Site Request Forgery

    Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.…

  • Unscored —

    The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, an…

  • Unscored —

    The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.…