Skip to content
OpenAdvisories

Archive

June 2016

Vulnerabilities first published in this month (UTC), newest first.

← May 2016 2016 / June July 2016 →
  1. 117
  2. 2 
  3. 38
  4. 49
  5. 536
  6. 61
  7. 721
  8. 840
  9. 912
  10. 1022
  11. 11 
  12. 12 
  13. 1374
  14. 146
  15. 15 
  16. 1694
  17. 176
  18. 183
  19. 1937
  20. 207
  21. 21 
  22. 22 
  23. 239
  24. 246
  25. 2514
  26. 2611
  27. 2714
  28. 283
  29. 2918
  30. 3042
All Critical High Medium Low Exploited only Public exploit

510 results · Feed

  • Unscored —
    CVE-2016-4371

    HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to ob…

  • Unscored —
    CVE-2016-1432

    Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a d…

  • Unscored —
    CVE-2016-1427

    The System Configuration Protocol (SCP) core messaging interface in Cisco Prime Network Registrar 8.2 before 8.2.3.1 an…

  • Unscored —
    CVE-2016-1431

    Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 al…

  • Critical 9.1
    CVE-2015-8914

    OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

    The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source …

    neutron neutron Debian PyPI
  • Unscored —
    CVE-2016-3642 EPSS 13%

    The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary com…

  • High 7.8
    CVE-2016-3643 Exploited Public exploit

    SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfigurati…

    KEV Nov 3, 2021
  • High 8.2
    CVE-2016-5362

    OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism

    The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discove…

    neutron neutron Debian PyPI
  • High 8.2
    CVE-2016-5363

    OpenStack Neutron Intended MAC-spoofing protection mechanism bypass

    The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP disc…

    neutron neutron Debian PyPI
  • Unscored —
    CVE-2016-5433

    Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified v…

  • Unscored —
    CVE-2012-6702

    Expat, when used in a parser that has not called XML_SetHashSalt or passed it a seed of 0, makes it easier for context-…

    expat xmlrpc-c vnc4 expat Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-3687

    Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2…

  • Unscored —
    CVE-2016-3062

    The mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11 allows remote attackers to …

    ffmpeg libav Debian Ubuntu
  • Unscored —
    CVE-2016-2391

    The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS adminis…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-2538

    Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-2841

    The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local gue…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-2392

    The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly vali…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-5300

    The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attacke…

    expat xmlrpc-c vnc4 expat Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-4125

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4139

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4129

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4128

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4148

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4153

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4164

    Cross-site scripting (XSS) vulnerability in Adobe Brackets before 1.7 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2016-4138 Public exploit EPSS 25%

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4132

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4131

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4147

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4167

    Adobe DNG Software Development Kit (SDK) before 1.4 2016 allows attackers to execute arbitrary code or cause a denial o…

  • Unscored —
    CVE-2016-4145

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4121 EPSS 10%

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2016-4134

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4124

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4136 Public exploit EPSS 16%

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4122

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4155

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4126

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4154

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…

  • Unscored —
    CVE-2016-4166

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microso…