CVEs published February 3, 2016
12 CVEs were published on February 3, 2016: 0 critical, 0 high.
- Published
- 12
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- org.jenkins-ci.main:jenkins-core
- 4
- radicale
- 3
- github.com/kubernetes/kubernetes
- 1
- github.com/openshift/origin
- 1
- keystone · keystonemiddleware
- 1
- org.apache.camel:camel-xstream
- 1
Medium, low and unrated 12
- CVE-2015-5344The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via org.apache.camel:camel-xstream
- CVE-2015-7536Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrarorg.jenkins-ci.main:jenkins-core
- CVE-2015-7537Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentorg.jenkins-ci.main:jenkins-core
- CVE-2015-7538Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.org.jenkins-ci.main:jenkins-core
- CVE-2015-7539The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site dataorg.jenkins-ci.main:jenkins-core
- CVE-2015-7546The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerkeystone · keystonemiddleware
- CVE-2015-8747The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted componeradicale
- CVE-2015-8748Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user radicale
- CVE-2016-1505The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted pradicale
- CVE-2016-1905The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resourcgithub.com/kubernetes/kubernetes
- CVE-2016-1906Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that github.com/openshift/origin
- CVE-2016-2213The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote attackers to cause a denial of service (o