Skip to content
OpenAdvisories

Archive

13 January 2016

Vulnerabilities first published on this day (UTC), newest first.

← December 2015 2016 / January /13 February 2016 →
  1. 112
  2. 227
  3. 316
  4. 433
  5. 510
  6. 613
  7. 7 
  8. 847
  9. 916
  10. 105
  11. 1110
  12. 1224
  13. 1328
  14. 1420
  15. 1540
  16. 167
  17. 177
  18. 188
  19. 1911
  20. 2013
  21. 21216
  22. 2215
  23. 232
  24. 24 
  25. 2511
  26. 2612
  27. 2715
  28. 281
  29. 2919
  30. 3015
  31. 3116
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2015-8466

    Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date head…

    swift-plugin-s3 Ubuntu
  • Unscored —
    CVE-2015-8607

    The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve t…

    perl Debian
  • Medium 5.3
    CVE-2016-1494 Public exploit

    Python RSA allows attackers to spoof signatures

    The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.

    rsa python-rsa python-rsa Debian Ubuntu PyPI
  • Unscored —
    CVE-2016-1569

    FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager t…

  • Unscored —
    CVE-2015-6117

    Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass inte…

  • Unscored —
    CVE-2016-0019 EPSS 12%

    The Remote Desktop Protocol (RDP) service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers …

  • Unscored —
    CVE-2016-0031

    Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote at…

  • High 8.8
    CVE-2016-0024 EPSS 17%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability."

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-0009 EPSS 15%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold and 1511 allow remo…

  • Unscored —
    CVE-2016-0020

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle DLL loading, which allows …

  • High 8.8
    CVE-2016-0034 Exploited · Ransomware EPSS 69%

    Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers t…

    KEV May 25, 2022
  • Unscored —
    CVE-2016-0008 EPSS 14%

    The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window…

  • Unscored —
    CVE-2016-0018 EPSS 13%

    Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loa…

  • Unscored —
    CVE-2016-0029

    Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote at…

  • Unscored —
    CVE-2016-0010 EPSS 21%

    Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, Power…

  • Unscored —
    CVE-2016-0035 EPSS 22%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016…

  • Unscored —
    CVE-2016-0011

    Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass inte…

  • Unscored —
    CVE-2016-0007 Public exploit

    The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…

  • Unscored —
    CVE-2016-0016 Public exploit EPSS 30%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  • Unscored —
    CVE-2016-0012 EPSS 11%

    Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2…

  • Unscored —
    CVE-2016-0003 EPSS 38%

    Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Co…

  • Unscored —
    CVE-2016-0032

    Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumula…

  • Unscored —
    CVE-2016-0014

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  • Unscored —
    CVE-2016-0005 EPSS 28%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vecto…

  • Unscored —
    CVE-2016-0002 EPSS 23%

    The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 a…

  • Unscored —
    CVE-2016-0015 Public exploit EPSS 49%

    DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, W…

  • Unscored —
    CVE-2016-0030

    Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumula…

  • Unscored —
    CVE-2016-0006 Public exploit

    The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…