Skip to content
OpenAdvisories

Archive

January 2016

Vulnerabilities first published in this month (UTC), newest first.

← December 2015 2016 / January February 2016 →
  1. 112
  2. 227
  3. 316
  4. 433
  5. 510
  6. 613
  7. 7 
  8. 847
  9. 916
  10. 105
  11. 1110
  12. 1224
  13. 1328
  14. 1420
  15. 1540
  16. 167
  17. 177
  18. 188
  19. 1911
  20. 2013
  21. 21216
  22. 2215
  23. 232
  24. 24 
  25. 2511
  26. 2612
  27. 2715
  28. 281
  29. 2919
  30. 3015
  31. 3116
All Critical High Medium Low Exploited only Public exploit

669 results · Feed

  • Unscored —
    CVE-2016-0854 Public exploit EPSS 77%

    Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAcces…

  • Unscored —
    CVE-2016-0860

    Buffer overflow in the BwpAlarm subsystem in Advantech WebAccess before 8.1 allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2016-0858

    Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of…

  • Unscored —
    CVE-2016-0851

    Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service (out-of-bounds memory access) via u…

  • Unscored —
    CVE-2016-0856 EPSS 17%

    Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2016-0855

    Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list arbitrary virtual-d…

  • Unscored —
    CVE-2016-1898 EPSS 13%

    FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protoc…

    ffmpeg ffmpeg libav Debian Ubuntu
  • Unscored —
    CVE-2016-1897 EPSS 15%

    FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protoco…

    ffmpeg ffmpeg libav Debian Ubuntu
  • Unscored —
    CVE-2015-8605 EPSS 83%

    ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of servi…

    isc-dhcp isc-dhcp Debian Ubuntu
  • Unscored —
    CVE-2016-0943

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acr…

  • Unscored —
    CVE-2016-0946

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acr…

  • Unscored —
    CVE-2016-0942

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acr…

  • Unscored —
    CVE-2016-0939

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acr…

  • Unscored —
    CVE-2016-0938

    The AcroForm plugin in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.301…

  • Unscored —
    CVE-2016-0944

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acr…

  • Unscored —
    CVE-2016-0935

    Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.0…

  • Unscored —
    CVE-2016-0934

    Use-after-free vulnerability in AGM.dll in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Class…

  • Unscored —
    CVE-2016-0941

    Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat an…

  • Unscored —
    CVE-2016-0931

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acr…

  • Unscored —
    CVE-2016-0933

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acr…

  • Unscored —
    CVE-2016-0940

    Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 1…

  • Unscored —
    CVE-2016-0932

    Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and A…

  • Unscored —
    CVE-2016-0937

    Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and A…

  • Unscored —
    CVE-2016-0945

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acr…

  • Unscored —
    CVE-2016-0936

    Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acr…

  • Unscored —
    CVE-2016-0947

    Untrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and Acrobat before 11.0.14, Acro…

  • Medium 6.5
    CVE-2016-0777 Public exploit EPSS 63%

    The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote ser…

    openssh openssh Debian Ubuntu
  • High 8.1
    CVE-2016-0778 EPSS 21%

    The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x bef…

    openssh openssh Debian Ubuntu
  • Unscored —
    CVE-2015-8466

    Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date head…

    swift-plugin-s3 Ubuntu
  • Unscored —
    CVE-2015-8607

    The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve t…

    perl Debian
  • Medium 5.3
    CVE-2016-1494 Public exploit

    Python RSA allows attackers to spoof signatures

    The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.

    rsa python-rsa python-rsa Debian Ubuntu PyPI
  • Unscored —
    CVE-2016-1569

    FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager t…

  • Unscored —
    CVE-2015-6117

    Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass inte…

  • Unscored —
    CVE-2016-0019 EPSS 12%

    The Remote Desktop Protocol (RDP) service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers …

  • Unscored —
    CVE-2016-0031

    Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote at…

  • High 8.8
    CVE-2016-0024 EPSS 17%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability."

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-0009 EPSS 15%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold and 1511 allow remo…

  • Unscored —
    CVE-2016-0020

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle DLL loading, which allows …

  • High 8.8
    CVE-2016-0034 Exploited · Ransomware EPSS 69%

    Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers t…

    KEV May 25, 2022
  • Unscored —
    CVE-2016-0008 EPSS 14%

    The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window…