CVEs published October 7, 2016
13 CVEs were published on October 7, 2016: 0 critical, 0 high.
- Published
- 13
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- flask-oidc
- 1
- nova · cinder +1
- 1
- org.eclipse.jetty:jetty-server
- 1
Medium, low and unrated 13
- CVE-2016-1000001flask-oidc version 0.1.2 and earlier is vulnerable to an open redirectflask-oidc
- CVE-2016-1000003Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code.
- CVE-2016-1000007Pagure 2.2.1 XSS in raw file endpoint
- CVE-2015-2080The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memorg.eclipse.jetty:jetty-server
- CVE-2015-5162The image parser in OpenStack Cinder 7.0.2 and 8.0.0 through 8.1.1; Glance before 11.0.1 and 12.0.0; and Nova before 12.0.4 and 13.0.0 does nova · cinder +1
- CVE-2015-7363Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in
- CVE-2016-3699The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows
- CVE-2016-6273The lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) before 2015 SP5 and 2016 before R1 SP1, as used by Citrix Lice
- CVE-2016-6323The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on
- CVE-2016-7040Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and t
- CVE-2016-7167Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl
- CVE-2016-7424The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows remote attackers to cause a denial of service
- CVE-2016-7777Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XM