Skip to content
OpenAdvisories

Archive

May 2016

Vulnerabilities first published in this month (UTC), newest first.

68 results · Clear filters · Feed

  • Unscored —
    CVE-2016-1103 Public exploit EPSS 38%

    Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4108 Public exploit EPSS 38%

    Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microso…

  • High 7.5
    CVE-2016-0189 Exploited · Ransomware Public exploit EPSS 94%

    The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other…

    KEV Mar 28, 2022
  • High 7.8
    CVE-2016-0185 Exploited Public exploit EPSS 70%

    Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrar…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2016-0170 Public exploit EPSS 49%

    GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…

  • Unscored —
    CVE-2016-0169 Public exploit EPSS 43%

    GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…

  • Unscored —
    CVE-2016-0171 Public exploit

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-0173 Public exploit

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-0168 Public exploit EPSS 43%

    GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…

  • High 7.8
    CVE-2016-4117 Exploited · Ransomware Public exploit EPSS 94%

    Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as…

    KEV Mar 3, 2022
  • Unscored —
    CVE-2015-0569 Public exploit

    Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka …

  • Unscored —
    CVE-2016-2431 Public exploit

    The Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013), and Android One devi…

  • Unscored —
    CVE-2016-2434 Public exploit

    The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-4534 Public exploit

    The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on …

  • Unscored —
    CVE-2016-4535 Public exploit

    Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to …

  • Medium 5.5
    CVE-2016-3715 Exploited Public exploit EPSS 75%

    The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary f…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2016-3716 Public exploit EPSS 11%

    The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via…

  • Unscored —
    CVE-2016-3717 Public exploit EPSS 20%

    The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files v…

  • High 8.4
    CVE-2016-3714 Exploited Public exploit EPSS 97%

    The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6…

    KEV Sep 9, 2024
  • Medium 5.5
    CVE-2016-3718 Exploited Public exploit EPSS 76%

    The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2016-2107 Public exploit EPSS 89%

    The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a…

  • Unscored —
    CVE-2016-1575 Public exploit

    The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which a…

  • Unscored —
    CVE-2016-1576 Public exploit

    The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which al…

  • Unscored —
    CVE-2016-3140 Public exploit

    The digi_port_init function in drivers/usb/serial/digi_acceleport.c in the Linux kernel before 4.5.1 allows physically …

  • Unscored —
    CVE-2016-3136 Public exploit

    The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically …

  • Unscored —
    CVE-2016-2853 Public exploit

    The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local use…

  • Unscored —
    CVE-2016-2188 Public exploit

    The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proxima…

  • Unscored —
    CVE-2016-2854 Public exploit

    The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local us…