Skip to content
OpenAdvisories

Archive

November 2016

Vulnerabilities first published in this month (UTC), newest first.

← October 2016 2016 / November December 2016 →
  1. 11
  2. 21
  3. 322
  4. 421
  5. 5 
  6. 6 
  7. 72
  8. 835
  9. 9 
  10. 1075
  11. 119
  12. 122
  13. 13 
  14. 147
  15. 155
  16. 1613
  17. 175
  18. 186
  19. 1913
  20. 20 
  21. 21 
  22. 2210
  23. 236
  24. 2411
  25. 2578
  26. 26 
  27. 27 
  28. 2815
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.8
    CVE-2016-9451

    Drupal Open Redirect

    Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors.

    drupal/core drupal7 Ubuntu Packagist
  • Medium 6.5
    CVE-2016-9452

    Drupal Denial of service via transliterate mechanism

    The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL.

    drupal/core drupal/drupal Packagist
  • Medium 4.3
    CVE-2016-9449

    Drupal sensitive information disclosure

    The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.

    drupal/core drupal/drupal drupal7 Ubuntu Packagist
  • Medium 6.5
    CVE-2016-9563 Exploited EPSS 24%

    BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) atta…

    KEV Nov 3, 2021
  • Medium 5.5
    CVE-2016-9318

    libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indi…

    libxml2 libxml2 libxml2 Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2016-7146

    MoinMoin Cross-site Scripting (XSS) vulnerability

    MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.

    moin moin Ubuntu PyPI
  • Medium 6.1
    CVE-2016-7148

    MoinMoin Cross-site Scripting (XSS) vulnerability

    MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=AttachFile (via page name) component.

    moin moin Ubuntu PyPI
  • Medium 6.1
    CVE-2016-9188

    Moodle XSS Vulnerability

    Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead, s_additionalhtmltopofbody, and s_additionalhtmlfooter parameters.

    moodle/moodle moodle Ubuntu Packagist
  • Medium 5.5
    CVE-2016-9189

    Pillow Integer overflow in Map.c

    Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_buffer in map.c component.

    pillow pillow pillow Debian Ubuntu PyPI