Skip to content
OpenAdvisories

Archive

16 December 2016

Vulnerabilities first published on this day (UTC), newest first.

← November 2016 2016 / December /16 January 2017 →
  1. 111
  2. 22
  3. 39
  4. 4 
  5. 57
  6. 62
  7. 7 
  8. 813
  9. 919
  10. 1017
  11. 1148
  12. 1234
  13. 1342
  14. 1442
  15. 1559
  16. 1625
  17. 179
  18. 1813
  19. 192
  20. 2044
  21. 213
  22. 226
  23. 2329
  24. 244
  25. 252
  26. 263
  27. 272
  28. 2813
  29. 2943
  30. 309
  31. 316
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2016-9964

    bottle.py vulnerable to CRLF Injection

    redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.

    bottle python-bottle python-bottle Debian Ubuntu PyPI