Archive
June 2016
Vulnerabilities first published in this month (UTC), newest first.
510 results · Feed
-
Unscored —CVE-2016-3220 Public exploit
atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win…
-
Unscored —CVE-2016-3206 EPSS 15%
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other…
-
High 8.8CVE-2016-3199 EPSS 27%
ChakraCore RCE Vulnerability
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…
-
Unscored —CVE-2016-3211 EPSS 32%
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2016-3219 Public exploit
The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted applic…
-
High 7.8
Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mish…
KEV Nov 3, 2021 -
Unscored —CVE-2016-3215 EPSS 34%
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to o…
-
Unscored —
The SMB server component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1…
-
Unscored —CVE-2016-3210 EPSS 22%
The Microsoft (1) JScript and (2) VBScript engines, as used in Internet Explorer 11, allow remote attackers to execute …
-
Unscored —
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…
-
Unscored —
The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain …
-
Unscored —CVE-2016-3212 EPSS 10%
The XSS Filter in Microsoft Internet Explorer 9 through 11 does not properly identify JavaScript, which makes it easier…
-
Unscored —
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…
-
Unscored —CVE-2016-3198 EPSS 32%
Microsoft Edge allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted d…
-
Unscored —
The Search component in Microsoft Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, …
-
Unscored —CVE-2016-3227 EPSS 25%
Use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote att…
-
Unscored —CVE-2016-3233 EPSS 15%
Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary…
-
Unscored —
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
-
Unscored —
GDI32.dll in the Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, …
-
Unscored —CVE-2016-3234 EPSS 26%
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Se…
-
Unscored —
The Virtual PCI (VPCI) virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows local users to obta…
-
Unscored —CVE-2016-3203 EPSS 33%
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attac…
-
Unscored —CVE-2016-3205 EPSS 15%
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other…
-
Unscored —CVE-2016-3201 EPSS 24%
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attac…
-
Unscored —
Stack-based buffer overflow in Huawei Honor WS851 routers with software 1.1.21.1 and earlier allows remote attackers to…
-
Unscored —
The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to ca…
-
Unscored —
The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (o…
-
Unscored —
Huawei Honor WS851 routers with software 1.1.21.1 and earlier allow remote attackers to obtain sensitive information vi…
-
Unscored —
The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitiv…
-
Unscored —
Huawei Honor WS851 routers with software 1.1.21.1 and earlier allow remote attackers to modify configuration data via v…
-
Unscored —
OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow …
-
Unscored —
modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registeri…
-
Unscored —
ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers to cause a den…
-
Unscored —
Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service…
-
Unscored —
The onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote attackers to cause a denial…
-
Unscored —
Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attac…
-
Unscored —
Buffer overflow in the xmlrpc_char_encode function in modules/transport/xmlrpc/xmlrpclib.c in Atheme before 7.2.7 allow…
-
Unscored —
ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows remote attackers t…
-
Unscored —
Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecifie…
-
Unscored —
The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a deni…