Archive
February 2016
Vulnerabilities first published in this month (UTC), newest first.
380 results · Feed
-
Unscored —
Use-after-free vulnerability in the instanceof function in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x befor…
-
Unscored —
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and O…
-
Unscored —
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on…
-
Unscored —
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on…
-
Unscored —
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and…
-
High 7.5
Exposure of Sensitive Information to an Unauthorized Actor in Apache Sling Servlets Post
The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspecified vectors.
-
Unscored —
Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vectors.
-
Unscored —
The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a File…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbit…
-
Unscored —
Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the u…
-
Unscored —
The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenti…
-
Unscored —CVE-2016-0080 EPSS 15%
Microsoft Edge mishandles exceptions during window-message dispatch operations, which allows remote attackers to bypass…
-
Unscored —
Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server…
-
High 7.8
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to …
KEV Mar 28, 2022 -
Unscored —CVE-2016-0052 EPSS 19%
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011,…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote…
-
Unscored —
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold a…
-
Unscored —CVE-2016-0064 EPSS 14%
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2016-0053 EPSS 19%
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibili…
-
Unscored —
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…
-
Unscored —CVE-2016-0060 EPSS 27%
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a…
-
Unscored —CVE-2016-0036 EPSS 11%
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and …
-
Unscored —CVE-2016-0072 EPSS 20%
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2016-0056 EPSS 16%
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Office Compati…
-
Unscored —CVE-2016-0022 EPSS 19%
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011,…
-
Unscored —CVE-2016-0047 EPSS 20%
WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensi…
-
Unscored —CVE-2016-0050 EPSS 18%
Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses usern…
-
Unscored —CVE-2016-0061 EPSS 21%
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a…
-
Unscored —CVE-2016-0033 EPSS 18%
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 does not prevent recursive compilation of XSLT tran…
-
Unscored —CVE-2016-0044 EPSS 14%
Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a …
-
Unscored —CVE-2016-0059 EPSS 23%
The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive in…
-
Unscored —CVE-2016-0062 EPSS 21%
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of…
-
Unscored —CVE-2016-0054 EPSS 16%
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016…
-
Unscored —CVE-2016-0037 EPSS 26%
The forms-based authentication implementation in Active Directory Federation Services (ADFS) 3.0 in Microsoft Windows S…
-
Unscored —CVE-2016-0058 EPSS 23%
Buffer overflow in the PDF Library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows rem…
-
Unscored —CVE-2016-0071 EPSS 14%
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…
-
Unscored —CVE-2016-0084 EPSS 17%
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
-
Unscored —CVE-2016-0046 EPSS 26%
Windows Reader in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to exe…
-
Unscored —
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…