Skip to content
OpenAdvisories

Archive

July 2016

Vulnerabilities first published in this month (UTC), newest first.

← June 2016 2016 / July August 2016 →
  1. 15
  2. 221
  3. 346
  4. 412
  5. 58
  6. 66
  7. 77
  8. 812
  9. 9 
  10. 10 
  11. 11100
  12. 1217
  13. 13131
  14. 14 
  15. 1527
  16. 16 
  17. 175
  18. 18 
  19. 1910
  20. 20 
  21. 21192
  22. 2268
  23. 2318
  24. 24 
  25. 2510
  26. 264
  27. 27 
  28. 2810
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

709 results · Feed

  • Unscored —
    CVE-2016-3243 EPSS 13%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2016-3284 EPSS 20%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016…

  • Unscored —
    CVE-2016-3244 EPSS 19%

    Microsoft Edge allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft E…

  • High 8.8
    CVE-2016-3269 EPSS 21%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-3283 EPSS 20%

    Microsoft Word Viewer allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft O…

  • Unscored —
    CVE-2016-3252

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-3271 EPSS 21%

    The VBScript engine in Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a…

  • Unscored —
    CVE-2016-3251 EPSS 58%

    The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Window…

  • Unscored —
    CVE-2016-3245 EPSS 15%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to trick users into making TCP connections to a restri…

  • High 8.8
    CVE-2016-3248 EPSS 24%

    ChakraCore RCE Vulnerability

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corrup…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-3261 EPSS 15%

    Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information via a crafted web site, aka "Int…

  • Unscored —
    CVE-2016-3246 EPSS 14%

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

  • Unscored —
    CVE-2016-3272 EPSS 43%

    The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mish…

  • Unscored —
    CVE-2016-3277 EPSS 32%

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a c…

  • Unscored —
    CVE-2016-3240 EPSS 14%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2016-3238 Public exploit EPSS 34%

    The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.…

  • Unscored —
    CVE-2016-3254

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-3278 EPSS 20%

    Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a cra…

  • Unscored —
    CVE-2016-3287

    Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users…

  • High 8.8
    CVE-2016-3260 EPSS 24%

    ChakraCore RCE Vulnerability

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via …

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-3274

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks …

  • Unscored —
    CVE-2016-3281 EPSS 20%

    Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for …

  • Unscored —
    CVE-2016-3250

    The kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 Gold and 1511 allow local users to gain privile…

  • High 8.8
    CVE-2016-3265 EPSS 21%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CV…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-3276

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a craf…

  • Unscored —
    CVE-2016-3204 EPSS 19%

    The Microsoft (1) JScript 5.8 and 9 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and…

  • High 8.8
    CVE-2016-3259 EPSS 35%

    ChakraCore RCE Vulnerability

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corrup…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-3249

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-3264 EPSS 15%

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a…

  • Unscored —
    CVE-2016-3282 EPSS 26%

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011,…

  • Unscored —
    CVE-2016-3258

    Race condition in the kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 …

  • Unscored —
    CVE-2016-3239

    The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.…

  • Unscored —
    CVE-2016-3286

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

  • Unscored —
    CVE-2016-3273 EPSS 16%

    The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript cod…

  • Unscored —
    CVE-2016-3255 EPSS 25%

    Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via…

  • Medium 5.5
    CVE-2015-3192

    Pivotal Spring Framework DoS Attack with XML Input

    Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a craft…

    libspring-java libspring-java org.springframework:spring-web Debian Ubuntu Maven
  • Unscored —
    CVE-2016-4994

    Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to ca…

    gimp gimp Debian Ubuntu
  • Medium 5.4
    CVE-2016-4428

    OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.

    horizon horizon horizon Debian Ubuntu PyPI
  • High 7.5
    CVE-2016-4985

    OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor

    The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node…

    ironic ironic ironic Debian Ubuntu PyPI
  • Unscored —
    CVE-2016-6174 Public exploit EPSS 12%

    applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power B…