2016 CVEs (page 47)
Page 47 of 94 — CVEs published in 2016, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-7205 | High | 8.8 | 2016-11-10 | Animation Manager in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511… |
CVE-2016-7204 | Low | 3.1 | 2016-11-10 | Microsoft Edge allows remote attackers to access arbitrary "My Documents" files via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerabilit… |
CVE-2016-7203 | High | 7.5 | 2016-11-10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
CVE-2016-7202 | High | 7.5 | 2016-11-10 | The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of serv… |
CVE-2016-7201 | High | 8.8 | 2016-11-10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
CVE-2016-7200 | High | 8.8 | 2016-11-10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
CVE-2016-7199 | Low | 3.1 | 2016-11-10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the Same Origin Policy and obtain sensitive window-state informati… |
CVE-2016-7198 | High | 7.5 | 2016-11-10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… |
CVE-2016-7196 | High | 7.5 | 2016-11-10 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… |
CVE-2016-7195 | High | 7.5 | 2016-11-10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… |
CVE-2016-7184 | High | 7.8 | 2016-11-10 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-3343 | High | 7.8 | 2016-11-10 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-3342 | High | 7.8 | 2016-11-10 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-3340 | High | 7.8 | 2016-11-10 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-3338 | High | 7.8 | 2016-11-10 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-3335 | High | 7.8 | 2016-11-10 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-3334 | High | 7.8 | 2016-11-10 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-3333 | High | 7.8 | 2016-11-10 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-3332 | High | 7.8 | 2016-11-10 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-0026 | High | 7.8 | 2016-11-10 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go… |
CVE-2016-8812 | High | 8.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in… |
CVE-2016-8811 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-8810 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-8809 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-8808 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-8807 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-8806 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-8805 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-7391 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-7390 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-7389 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304 before 304.132, R340 before 340.98, R367 before 367.55, R361_9… |
CVE-2016-7388 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-7387 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-7386 | Medium | 5.5 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-7385 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-7384 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-7383 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in a mem… |
CVE-2016-7382 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows… |
CVE-2016-7381 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the k… |
CVE-2016-5852 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service p… |
CVE-2016-5025 | Medium | 6.6 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support layer causes a denial of service vulnerability (blue… |
CVE-2016-4961 | Medium | 5.5 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVStreamKMS.sys API layer caused a denial of service vulnerability… |
CVE-2016-4960 | High | 7.3 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, the NVIDIA NVStreamKMS.sys service component is improperly validating user-supplied data through its API entr… |
CVE-2016-4959 | High | 7.5 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, there is a Remote Desktop denial of service. A successful exploit of a vulnerable system will result in a ker… |
CVE-2016-3161 | High | 7.8 | 2016-11-08 | For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service p… |
CVE-2016-7865 | High | 8.8 | 2016-11-08 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could le… |
CVE-2016-7864 | High | 8.8 | 2016-11-08 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could le… |
CVE-2016-7863 | High | 8.8 | 2016-11-08 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could le… |
CVE-2016-7862 | High | 8.8 | 2016-11-08 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could le… |
CVE-2016-7861 | High | 8.8 | 2016-11-08 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could le… |
CVE-2016-7860 | High | 8.8 | 2016-11-08 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could le… |
CVE-2016-7859 | High | 8.8 | 2016-11-08 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could le… |
CVE-2016-7858 | High | 8.8 | 2016-11-08 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could le… |
CVE-2016-7857 | High | 8.8 | 2016-11-08 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful exploitation could le… |
CVE-2016-7851 | Medium | 6.1 | 2016-11-08 | Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-si… |
CVE-2016-9242 | High | 8.8 | 2016-11-07 | Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers/expRatingController.php in Exponent CMS 2.4.0 allow remote au… |
CVE-2016-9111 | Medium | 6.8 | 2016-11-07 | Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical acces… |
CVE-2016-8910 | Medium | 6.0 | 2016-11-04 | The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinit… |
CVE-2016-8909 | Medium | 6.0 | 2016-11-04 | The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite lo… |
CVE-2016-8870 | High | 8.1 | 2016-11-04 | The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disa… |
CVE-2016-8869 | Critical | 9.8 | 2016-11-04 | The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain… |
CVE-2016-8669 | Medium | 6.0 | 2016-11-04 | The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divid… |
CVE-2016-8668 | Medium | 6.0 | 2016-11-04 | The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-… |
CVE-2016-8667 | Medium | 6.0 | 2016-11-04 | The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero err… |
CVE-2016-8578 | Medium | 6.0 | 2016-11-04 | The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL… |
CVE-2016-8577 | Medium | 6.0 | 2016-11-04 | Memory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory co… |
CVE-2016-8576 | Medium | 6.0 | 2016-11-04 | The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop… |
CVE-2016-9190 | High | 7.8 | 2016-11-04 | Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Exten… |
CVE-2016-9189 | Medium | 5.5 | 2016-11-04 | Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overf… |
CVE-2016-9188 | Medium | 6.1 | 2016-11-04 | Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalh… |
CVE-2016-9187 | High | 8.8 | 2016-11-04 | Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbit… |
CVE-2016-9186 | High | 8.8 | 2016-11-04 | Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arb… |
CVE-2016-9185 | Medium | 4.3 | 2016-11-04 | In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration… |
CVE-2016-9184 | High | 7.5 | 2016-11-04 | In /framework/modules/core/controllers/expHTMLEditorController.php of Exponent CMS 2.4.0, untrusted input is used to construct a table name, and in the selectO… |
CVE-2016-9183 | High | 7.5 | 2016-11-04 | In /framework/modules/ecommerce/controllers/orderController.php of Exponent CMS 2.4.0, untrusted input is passed into selectObjectsBySql. The method selectObje… |
CVE-2016-9182 | High | 7.5 | 2016-11-04 | Exponent CMS 2.4 uses PHP reflection to call a method of a controller class, and then uses the method name to check user permission. But, the method name in PH… |
CVE-2016-9177 | High | 7.5 | 2016-11-04 | Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. |
CVE-2016-9176 | Critical | 9.8 | 2016-11-04 | Stack buffer overflow in the send.exe and receive.exe components of Micro Focus Rumba 9.4 and earlier could be used by local attackers or attackers able to inj… |
CVE-2016-6455 | High | 7.5 | 2016-11-03 | A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2) could allow an unauthenticated, remote attacker… |
CVE-2016-6454 | Medium | 6.5 | 2016-11-03 | A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unaut… |
CVE-2016-6453 | High | 7.3 | 2016-11-03 | A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL comman… |
CVE-2016-6452 | Critical | 9.8 | 2016-11-03 | A vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication. T… |
CVE-2016-6451 | Medium | 6.1 | 2016-11-03 | Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a c… |
CVE-2016-6448 | Critical | 9.8 | 2016-11-03 | A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary c… |
CVE-2016-6447 | Critical | 9.8 | 2016-11-03 | A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This v… |
CVE-2016-6441 | Critical | 9.8 | 2016-11-03 | A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of… |
CVE-2016-6430 | High | 7.8 | 2016-11-03 | A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an authenticated, local attacker to… |
CVE-2016-6429 | Medium | 6.1 | 2016-11-03 | A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an unauthenticated, remote attacker to… |
CVE-2016-9136 | High | 7.5 | 2016-11-03 | Artifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive information by using the "cr… |
CVE-2016-9135 | High | 7.5 | 2016-11-03 | Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the version parameter. Impa… |
CVE-2016-9134 | High | 7.5 | 2016-11-03 | Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting the order parameter. Impact is Information Disclosure. |
CVE-2016-9086 | Medium | 6.5 | 2016-11-03 | GitLab versions 8.9.x and above contain a critical security flaw in the "import/export project" feature of GitLab. Added in GitLab 8.9, this feature allows a u… |
CVE-2016-7453 | Critical | 9.8 | 2016-11-03 | The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection. |
CVE-2016-7452 | High | 7.5 | 2016-11-03 | The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory travers… |
CVE-2016-7402 | Critical | 9.8 | 2016-11-03 | SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system administrator) via dbcc i… |
CVE-2016-7160 | High | 7.5 | 2016-11-03 | A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash… |
CVE-2016-7095 | Critical | 9.8 | 2016-11-03 | Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one al… |
CVE-2016-4025 | Medium | 5.5 | 2016-11-03 | Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoin… |
CVE-2016-8864 | High | 7.5 | 2016-11-02 | named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion fai… |
CVE-2016-7855 | High | 8.8 | 2016-11-01 | Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute ar… |