Archive
April 2016
Vulnerabilities first published in this month (UTC), newest first.
653 results · Feed
-
Medium 4.3
Roundup sensitive data disclosure vulnerability
schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing user details.
-
Unscored —
Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to …
-
Unscored —
Integer overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01…
-
Unscored —
Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers …
-
Unscored —
The graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92…
-
Unscored —
Multiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in openSUSE Leap 42.1 and b…
-
Unscored —
Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute ar…
-
Unscored —
Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a …
-
Unscored —CVE-2016-0157 EPSS 15%
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
-
Unscored —CVE-2016-0127 EPSS 21%
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3…
-
Unscored —
The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…
-
Unscored —CVE-2016-0166 EPSS 16%
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Medium 4.3
Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaSc…
KEV May 24, 2022 -
Unscored —
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and…
-
Unscored —CVE-2016-0150 EPSS 28%
HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via c…
-
Unscored —CVE-2016-0153 EPSS 21%
OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…
-
Unscored —
The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted a…
-
Unscored —CVE-2016-0161 EPSS 68%
Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge El…
-
Unscored —
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Comp…
-
Unscored —
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 allows guest OS users to obtain sensitive info…
-
High 7.8
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …
KEV Jun 22, 2023 -
Unscored —CVE-2016-0143 Public exploit
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …
-
Unscored —CVE-2016-0136 EPSS 20%
Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, …
-
Unscored —CVE-2016-0158 EPSS 15%
Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge El…
-
Unscored —
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to obtain sensi…
-
Unscored —CVE-2016-0128 EPSS 21%
The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
-
Unscored —CVE-2016-0160 EPSS 13%
Microsoft Internet Explorer 11 mishandles DLL loading, which allows local users to gain privileges via a crafted applic…
-
Unscored —CVE-2016-0155 EPSS 10%
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
-
High 7.8CVE-2016-0167 Exploited · Ransomware
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …
KEV Nov 3, 2021 -
Unscored —CVE-2016-0147 EPSS 15%
Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.…
-
Unscored —
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbi…
-
Unscored —CVE-2016-0156 EPSS 19%
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
-
Unscored —CVE-2016-0154 EPSS 14%
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a…
-
Unscored —CVE-2016-0164 EPSS 13%
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…
-
Unscored —CVE-2016-0159 EPSS 16%
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…
-
High 7.8
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…
KEV Mar 28, 2022 -
Unscored —CVE-2016-0148 EPSS 14%
Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a cr…
-
Unscored —CVE-2016-0139 EPSS 16%
Microsoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer allow remote attackers to execute arbitrary code via a cr…
-
Unscored —
Cisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (C…
-
Unscored —
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before …