Skip to content
OpenAdvisories

Archive

3 March 2017

Vulnerabilities first published on this day (UTC), newest first.

← February 2017 2017 / March /3 April 2017 →
  1. 158
  2. 248
  3. 350
  4. 48
  5. 516
  6. 616
  7. 764
  8. 8109
  9. 928
  10. 1024
  11. 119
  12. 1212
  13. 1315
  14. 1464
  15. 1588
  16. 1620
  17. 17180
  18. 183
  19. 193
  20. 2063
  21. 2122
  22. 2229
  23. 23105
  24. 2447
  25. 251
  26. 269
  27. 2759
  28. 2839
  29. 2932
  30. 3045
  31. 3136
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2016-10193

    espeak-ruby allows arbitrary command execution

    The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or bytes_wav method in lib/espeak/speech.rb.

    espeak-ruby RubyGems
  • Critical 9.8
    CVE-2016-10194

    festivaltts4r allows arbitrary command execution

    The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.

    festivaltts4r RubyGems
  • Critical 9.0
    CVE-2016-10127

    PySAML2 XML external entity attack

    PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response.

    pysaml2 python-pysaml2 Debian PyPI