CVEs published December 24, 2016
4 CVEs were published on December 24, 2016: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- org.owasp.antisamy:antisamy
- 1
Medium, low and unrated 4
- CVE-2016-10006In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass thorg.owasp.antisamy:antisamy
- CVE-2016-10037Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/trav
- CVE-2016-10038Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/trav
- CVE-2016-10039Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/trav