Skip to content
OpenAdvisories

Archive

12 January 2017

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2016-9299 Public exploit EPSS 97%

    Improper Neutralization of Special Elements used in an LDAP Query in Jenkins

    The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.

  • Unscored —
    CVE-2016-8462 Public exploit

    An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its p…

  • Unscored —
    CVE-2016-6772 Public exploit

    An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code w…