Skip to content
OpenAdvisories

Archive

October 2016

Vulnerabilities first published in this month (UTC), newest first.

← September 2016 2016 / October November 2016 →
  1. 13
  2. 2 
  3. 345
  4. 4 
  5. 552
  6. 642
  7. 713
  8. 8 
  9. 91
  10. 10108
  11. 11 
  12. 12 
  13. 1399
  14. 1438
  15. 15 
  16. 1614
  17. 178
  18. 18 
  19. 19 
  20. 20 
  21. 2110
  22. 229
  23. 23 
  24. 24 
  25. 25162
  26. 266
  27. 2718
  28. 2835
  29. 296
  30. 306
  31. 3113
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.0
    CVE-2016-8579

    Denial of Service in docker2aci

    docker2aci <= 0.12.3 has an infinite loop when handling local images with cyclic dependency chain.

    golang-github-appc-docker2aci golang-github-appc-docker2aci github.com/appc/docker2aci Debian Ubuntu Go
  • Medium 6.6
    CVE-2016-8339 EPSS 15%

    A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out …

    Redis Redis redis Debian
  • Medium 5.9
    CVE-2005-4900

    SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as…

  • Medium 6.5
    CVE-2016-3298 Exploited EPSS 33%

    Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 a…

    KEV May 24, 2022
  • Medium 5.6
    CVE-2016-6652

    Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA

    SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 (Gosling SR6) and 1.10.x before 1.10.4 (Hopper SR4), when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands v…

    org.springframework.data:spring-data-jpa Maven
  • Medium 5.9
    CVE-2016-7046

    Undertow Uncaught Exception vulnerability

    Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.

    undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  • Medium 4.3
    CVE-2016-7570

    Drupal Users without "Administer comments" can set comment visibility on nodes they can edit

    Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging rights to edit those nodes.

    drupal/core drupal/drupal Packagist
  • Medium 4.3
    CVE-2016-7572

    Drupal Unprivileged access to config export

    The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for "Export configuration" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors.

    drupal/core drupal/drupal Packagist
  • Medium 6.1
    CVE-2016-7571

    Drupal Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception.

    drupal/core drupal/drupal Packagist