Skip to content
OpenAdvisories

Archive

12 April 2016

Vulnerabilities first published on this day (UTC), newest first.

75 results · Feed

  • Unscored —
    CVE-2016-0157 EPSS 15%

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

  • Unscored —
    CVE-2016-0127 EPSS 21%

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3…

  • Unscored —
    CVE-2016-0145 Public exploit EPSS 41%

    The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

  • Unscored —
    CVE-2016-0166 EPSS 16%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Medium 4.3
    CVE-2016-0162 Exploited EPSS 22%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaSc…

    KEV May 24, 2022
  • Unscored —

    EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and…

  • Unscored —
    CVE-2016-0150 EPSS 28%

    HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via c…

  • Unscored —
    CVE-2016-0153 EPSS 21%

    OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…

  • Unscored —

    The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted a…

  • Unscored —
    CVE-2016-0161 EPSS 68%

    Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge El…

  • Unscored —
    CVE-2016-0122 Public exploit EPSS 39%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Comp…

  • Unscored —

    Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 allows guest OS users to obtain sensitive info…

  • High 7.8
    CVE-2016-0165 Exploited Public exploit EPSS 14%

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …

    KEV Jun 22, 2023
  • Unscored —
    CVE-2016-0143 Public exploit

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …

  • Unscored —
    CVE-2016-0136 EPSS 20%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, …

  • Unscored —
    CVE-2016-0158 EPSS 15%

    Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge El…

  • Unscored —

    Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to obtain sensi…

  • Unscored —
    CVE-2016-0128 EPSS 21%

    The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…

  • Unscored —
    CVE-2016-0160 EPSS 13%

    Microsoft Internet Explorer 11 mishandles DLL loading, which allows local users to gain privileges via a crafted applic…

  • Unscored —
    CVE-2016-0155 EPSS 10%

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

  • High 7.8
    CVE-2016-0167 Exploited · Ransomware

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …

    KEV Nov 3, 2021
  • Unscored —
    CVE-2016-0147 EPSS 15%

    Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.…

  • Unscored —

    Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbi…

  • Unscored —
    CVE-2016-0156 EPSS 19%

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

  • Unscored —
    CVE-2016-0154 EPSS 14%

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a…

  • Unscored —
    CVE-2016-0164 EPSS 13%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2016-0159 EPSS 16%

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  • High 7.8
    CVE-2016-0151 Exploited · Ransomware Public exploit EPSS 63%

    The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…

    KEV Mar 28, 2022
  • Unscored —
    CVE-2016-0148 EPSS 14%

    Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a cr…

  • Unscored —
    CVE-2016-0139 EPSS 16%

    Microsoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer allow remote attackers to execute arbitrary code via a cr…

  • Unscored —

    Cisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (C…

  • Unscored —

    The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before …

  • Unscored —

    Adobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain sensitive information via…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2016-2118 Public exploit EPSS 37%

    The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x befo…

  • Unscored —

    HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive informat…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2) CheckBoxMultipleChoice classes in Apa…

  • Unscored —
    CVE-2015-5347 Public exploit

    Cross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache.wicket.extensions.ajax.m…

  • Unscored —
    CVE-2016-4004 Public exploit

    Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated admini…

  • Unscored —

    Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x befo…