Archive
3 October 2016
Vulnerabilities first published on this day (UTC), newest first.
45 results · Feed
-
Critical 9.8
Apache Struts improper action name cleanup
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.
-
Unscored —CVE-2016-5180 Public exploit
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cau…
-
Unscored —
Stack-based buffer overflow in the extractTree function in unADF allows remote attackers to execute arbitrary code via …
-
Unscored —
The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a direc…
-
Unscored —CVE-2016-1240 Public exploit
The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debi…