Skip to content
OpenAdvisories

Archive

7 October 2016

Vulnerabilities first published on this day (UTC), newest first.

← September 2016 2016 / October /7 November 2016 →
  1. 13
  2. 2 
  3. 345
  4. 4 
  5. 552
  6. 642
  7. 713
  8. 8 
  9. 91
  10. 10108
  11. 11 
  12. 12 
  13. 1399
  14. 1438
  15. 15 
  16. 1614
  17. 178
  18. 18 
  19. 19 
  20. 20 
  21. 2110
  22. 229
  23. 23 
  24. 24 
  25. 25162
  26. 266
  27. 2718
  28. 2835
  29. 296
  30. 306
  31. 3113
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • High 7.4
    CVE-2016-1000001

    flask-oidc Open Redirect vulnerability

    flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect

    flask-oidc PyPI
  • Unscored —
    CVE-2016-1000007

    Pagure 2.2.1 XSS in raw file endpoint

  • Unscored —
    CVE-2016-1000003

    Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code.

  • Unscored —
    CVE-2015-7363

    Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5…

  • High 7.5
    CVE-2015-2080 Public exploit EPSS 75%

    Jetty vulnerable to exposure of sensitive information to unauthenticated remote users

    The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.

    org.eclipse.jetty:jetty-server Maven
  • High 7.5
    CVE-2015-5162

    OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption

    The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service (memory and disk consumptio…

    nova nova glance nova Debian Ubuntu PyPI
  • Unscored —
    CVE-2016-7167 EPSS 12%

    Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape …

    curl curl curl Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-7424

    The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows remote attackers to caus…

    libav Ubuntu
  • Unscored —
    CVE-2016-7777

    Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or m…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-7040

    Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine v…

  • Unscored —
    CVE-2016-6323

    The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible …

    glibc eglibc glibc Debian Ubuntu
  • Unscored —
    CVE-2016-6273

    The lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) before 2015 SP5 and 2016 before R1 SP1, a…

  • Unscored —
    CVE-2016-3699

    The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure…