Skip to content
OpenAdvisories

Archive

9 December 2016

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.5
    CVE-2016-6321 EPSS 16%

    Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote att…

  • High 7.5

    The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of s…

  • High 8.1

    Django DNS Rebinding Vulnerability

    Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.

  • High 7.5
    CVE-2016-8858 Public exploit EPSS 29%

    The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of…