CVEs published February 16, 2016
13 CVEs were published on February 16, 2016: 1 critical, 1 high. 3 are now in CISA KEV.
- Published
- 13
- Critical
- 1
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 3
- Fix available
- 9
Most affected products
- actionpack
- 3
- rails-html-sanitizer
- 3
- actionview · actionpack
- 1
- activemodel
- 1
- activerecord
- 1
Critical 1
High 1
Medium, low and unrated 11
- CVE-2016-2387Multiple cross-site scripting (XSS) vulnerabilities in the Java Proxy Runtime ProxyServer servlet in SAP NetWeaver 7.4 allow remote attacker
- CVE-2016-2388The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted
- CVE-2016-2389Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 fo
- CVE-2015-7576The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implemeactionpack
- CVE-2015-7577activerecord/lib/active_record/nested_attributes.rb in Active Record in Ruby on Rails 3.1.x and 3.2.x before 3.2.22.1, 4.0.x and 4.1.x beforactiverecord
- CVE-2015-7578Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackerrails-html-sanitizer
- CVE-2015-7579Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem 1.0.2 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inrails-html-sanitizer
- CVE-2015-7580Cross-site scripting (XSS) vulnerability in lib/rails/html/scrubbers.rb in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.xrails-html-sanitizer
- CVE-2015-7581actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows ractionpack
- CVE-2016-0751actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x befactionpack
- CVE-2016-0753Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level wactivemodel