Skip to content
OpenAdvisories

Archive

March 2016

Vulnerabilities first published in this month (UTC), newest first.

← February 2016 2016 / March April 2016 →
  1. 16
  2. 24
  3. 319
  4. 414
  5. 5 
  6. 616
  7. 7 
  8. 8 
  9. 953
  10. 10 
  11. 11 
  12. 1249
  13. 1347
  14. 145
  15. 152
  16. 165
  17. 174
  18. 1811
  19. 194
  20. 20 
  21. 211
  22. 224
  23. 23 
  24. 2462
  25. 251
  26. 267
  27. 27 
  28. 284
  29. 298
  30. 302
  31. 312
All Critical High Medium Low Exploited only Public exploit

330 results · Feed

  • Unscored —
    CVE-2016-1786

    The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with …

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-1736

    Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a de…

  • Unscored —
    CVE-2016-1735

    Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a de…

  • Unscored —
    CVE-2016-1768 Public exploit EPSS 17%

    QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —
    CVE-2016-1777

    Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to de…

  • Unscored —
    CVE-2016-1749 Public exploit

    IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a …

  • Unscored —
    CVE-2016-1756

    The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged c…

  • Unscored —
    CVE-2016-1741 Public exploit EPSS 12%

    The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary …

  • Unscored —
    CVE-2016-1781

    WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web s…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-1770

    The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requireme…

  • Unscored —
    CVE-2016-1754

    The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to ex…

  • Unscored —
    CVE-2016-1775

    TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote atta…

  • Unscored —
    CVE-2016-1767 Public exploit

    QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —
    CVE-2016-1745

    IOFireWireFamily in Apple OS X before 10.11.4 allows local users to cause a denial of service (NULL pointer dereference…

  • Unscored —
    CVE-2016-1784

    The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote atta…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-1766

    The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof…

  • Unscored —
    CVE-2016-1737

    Carbon in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

  • Unscored —
    CVE-2016-1747

    IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a d…

  • Unscored —
    CVE-2016-1755 Public exploit

    The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to ex…

  • Unscored —
    CVE-2016-1763

    Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which…

  • Unscored —
    CVE-2016-1748

    IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to o…

  • Unscored —
    CVE-2016-1779

    WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtai…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-1771

    The Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote attackers to cause a de…

  • Unscored —
    CVE-2016-1774

    The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permission…

  • Unscored —
    CVE-2016-1759

    The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a d…

  • Unscored —
    CVE-2016-1772

    The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web server…

  • Unscored —
    CVE-2016-1783

    WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary cod…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-1776

    Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which al…

  • Unscored —
    CVE-2016-1751

    The kernel in Apple iOS before 9.3, tvOS before 9.2, and watchOS before 2.2 does not properly restrict the execute perm…

  • Unscored —
    CVE-2016-1744 Public exploit

    The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary c…

  • Unscored —
    CVE-2016-1780

    WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-1764 Public exploit

    The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to ob…

  • Unscored —
    CVE-2016-1738

    dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.

  • High 8.1
    CVE-2016-1762

    The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffe…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1761

    libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2016-1734 Public exploit

    AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arb…

  • Unscored —
    CVE-2016-1746

    IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a d…

  • Unscored —
    CVE-2016-1765

    otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption a…

  • Unscored —
    CVE-2016-1785

    The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding d…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-1732

    AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause…