Skip to content
OpenAdvisories

Archive

3 October 2016

Vulnerabilities first published on this day (UTC), newest first.

← September 2016 2016 / October /3 November 2016 →
  1. 13
  2. 2 
  3. 345
  4. 4 
  5. 552
  6. 642
  7. 713
  8. 8 
  9. 91
  10. 10108
  11. 11 
  12. 12 
  13. 1399
  14. 1438
  15. 15 
  16. 1614
  17. 178
  18. 18 
  19. 19 
  20. 20 
  21. 2110
  22. 229
  23. 23 
  24. 24 
  25. 25162
  26. 266
  27. 2718
  28. 2835
  29. 296
  30. 306
  31. 3113
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2015-1832 EPSS 12%

    Improper Restriction of XML External Entity Reference in Apace Derby

    XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service (resource consumption) via v…

    org.apache.derby:derby derby derby Debian Ubuntu Maven
  • Critical 9.8
    CVE-2016-7405

    ADOdb Library SQL Injection

    The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting.

    libphp-adodb libphp-adodb adodb/adodb-php Debian Ubuntu Packagist
  • Critical 9.8
    CVE-2016-5019

    Apache MyFaces Trinidad Deserialization Vulnerability

    CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserialization attacks via a crafted serialized view state string.

    org.apache.myfaces.trinidad:trinidad Maven
  • Critical 9.8
    CVE-2016-4436

    Apache Struts improper action name cleanup

    Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.

    org.apache.struts:struts2-core Maven