Skip to content
OpenAdvisories

Archive

15 December 2016

Vulnerabilities first published on this day (UTC), newest first.

← November 2016 2016 / December /15 January 2017 →
  1. 111
  2. 22
  3. 39
  4. 4 
  5. 57
  6. 62
  7. 7 
  8. 813
  9. 919
  10. 1017
  11. 1148
  12. 1234
  13. 1342
  14. 1442
  15. 1559
  16. 1625
  17. 179
  18. 1813
  19. 192
  20. 2044
  21. 213
  22. 226
  23. 2329
  24. 244
  25. 252
  26. 263
  27. 272
  28. 2813
  29. 2943
  30. 309
  31. 316
All Critical High Medium Low Exploited only Public exploit

59 results · Feed

  • Unscored —
    CVE-2016-6933

    Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation is…

  • Unscored —
    CVE-2016-6845

    An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails i…

  • Unscored —
    CVE-2016-6844

    An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when…

  • Unscored —
    CVE-2016-6853 Public exploit

    An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code and references to external websites can…

  • Unscored —
    CVE-2016-6852

    An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Users can provide local file paths to the RSS r…

  • Unscored —
    CVE-2016-6843

    An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code can be injected to contact names. W…

  • Unscored —
    CVE-2016-6847

    An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. SVG files can be used as mp3 album covers. In c…

  • Unscored —
    CVE-2016-6851 Public exploit

    An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided as parameter to the OX …

  • Unscored —
    CVE-2016-6854 Public exploit

    An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inlin…

  • Unscored —
    CVE-2016-6850

    An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. SVG files can be used as profile pictures. In c…

  • Unscored —
    CVE-2016-6848

    An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. API requests can be used to inject, generate an…

  • Unscored —
    CVE-2016-6934

    Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation is…

  • Unscored —
    CVE-2016-6842

    An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Setting the user's name to JS code makes that c…

  • Unscored —
    CVE-2016-3174

    An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The "defer" servlet offers to redirect a client…

  • Unscored —
    CVE-2016-3173

    An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter of tiles at the Portal…

  • Unscored —
    CVE-2016-2840

    An issue was discovered in Open-Xchange Server 6 / OX AppSuite before 7.8.0-rev26. The "session" parameter for file-dow…

  • Unscored —
    CVE-2016-5740 Public exploit

    An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be used as part of ical att…

  • Unscored —
    CVE-2016-5124

    An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev14. Adding images from external sources to HTML ed…

  • Unscored —
    CVE-2015-6574

    The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of …