Skip to content
OpenAdvisories

Archive

June 2016

Vulnerabilities first published in this month (UTC), newest first.

6 results · Clear filters · Feed

  • High 7.8
    CVE-2016-3643 Exploited Public exploit

    SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfigurati…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2016-4171 Exploited EPSS 20%

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary cod…

    KEV Mar 25, 2022
  • High 7.8
    CVE-2016-3235 Exploited Public exploit EPSS 43%

    Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mish…

    KEV Nov 3, 2021
  • High 7.5
    CVE-2016-4523 Exploited EPSS 31%

    The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause …

    KEV Apr 15, 2022
  • Critical 9.8
    CVE-2016-4437 Exploited Public exploit EPSS 93%

    Improper Access Control in Apache Shiro

    Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2016-3088 Exploited Public exploit EPSS 98%

    Improper Input Validation in Apache ActiveMQ

    The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.

    KEV Feb 10, 2022