Skip to content
OpenAdvisories

Archive

August 2016

Vulnerabilities first published in this month (UTC), newest first.

← July 2016 2016 / August September 2016 →
  1. 114
  2. 214
  3. 39
  4. 4 
  5. 584
  6. 673
  7. 750
  8. 827
  9. 932
  10. 106
  11. 11 
  12. 127
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 186
  19. 1917
  20. 20 
  21. 21 
  22. 2211
  23. 235
  24. 247
  25. 258
  26. 2619
  27. 27 
  28. 28 
  29. 291
  30. 306
  31. 3113
All Critical High Medium Low Exploited only Public exploit

409 results · Feed

  • High 8.8
    CVE-2016-4657 Exploited Public exploit EPSS 67%

    WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
    KEV May 24, 2022
  • High 7.8
    CVE-2016-4656 Exploited Public exploit EPSS 24%

    The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a deni…

    KEV May 24, 2022
  • Unscored —
    CVE-2016-6369

    Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows …

  • Unscored —
    CVE-2016-5681 EPSS 12%

    Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx befo…

  • Unscored —
    CVE-2016-5673

    UltraVNC Repeater before 1300 does not restrict destination IP addresses or TCP ports, which allows remote attackers to…

  • Unscored —
    CVE-2016-4069

    Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the…

    roundcube roundcube Debian Ubuntu
  • Unscored —
    CVE-2016-6231

    Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-mi…

  • Unscored —
    CVE-2016-7089 Public exploit

    WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifc…

  • Unscored —
    CVE-2016-6909 Public exploit EPSS 50%

    Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9…

  • Unscored —
    CVE-2016-5812

    Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password sto…

  • High 7.3
    CVE-2016-5645 EPSS 38%

    Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32…

  • Unscored —
    CVE-2016-5799

    Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict a…

  • Unscored —
    CVE-2016-5650

    ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to tr…

  • Unscored —
    CVE-2016-5081

    ZModo ZP-NE14-S and ZP-IBH-13W devices have a hardcoded root password, which makes it easier for remote attackers to ob…

  • Unscored —
    CVE-2016-1477

    Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password…

  • Unscored —
    CVE-2016-1484

    Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive app…

  • Unscored —
    CVE-2016-6364

    The User Data Services (UDS) API implementation in Cisco Unified Communications Manager 11.5 allows remote attackers to…

  • Unscored —
    CVE-2016-6365

    Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and…

  • Unscored —
    CVE-2016-6355

    Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allow…

  • Unscored —
    CVE-2016-0915

    The Self-Service Portal in EMC RSA Authentication Manager (AM) Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 all…

  • Unscored —
    CVE-2016-1479

    Cisco IP Phone 8800 devices with software 11.0(1) allow remote attackers to cause a denial of service (memory corruptio…

  • Unscored —
    CVE-2016-1485

    Cross-site scripting (XSS) vulnerability in Cisco Identity Services Engine 1.3(0.876) allows remote attackers to inject…

  • Unscored —
    CVE-2016-1476

    Cross-site scripting (XSS) vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated …

  • Unscored —
    CVE-2016-4376

    HPE FOS before 7.4.1d and 8.x before 8.0.1 on StoreFabric B switches allows remote attackers to obtain sensitive inform…

  • Unscored —
    CVE-2016-4377

    HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite (CISSS) before 2.13.…

  • Unscored —
    CVE-2016-6361

    The Aggregated MAC Protocol Data Unit (AMPDU) implementation on Cisco Aironet 1800, 2800, and 3800 devices with softwar…

  • Unscored —
    CVE-2016-6362

    Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8…

  • Unscored —
    CVE-2016-6359

    Cross-site scripting (XSS) vulnerability in Cisco Transport Gateway Installation Software 4.1(4.0) on Smart Call Home T…

  • Unscored —
    CVE-2016-6363

    The rate-limit feature in the 802.11 protocol implementation on Cisco Aironet 1800, 2800, and 3800 devices with softwar…

  • Unscored —
    CVE-2016-5817

    SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to exec…

  • Unscored —
    CVE-2015-8022

    The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3…

  • Unscored —
    CVE-2015-8949

    Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecifie…

    libdbd-mysql-perl libdbd-mysql-perl Debian Ubuntu
  • Unscored —
    CVE-2014-9906

    Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) o…

    libdbd-mysql-perl libdbd-mysql-perl Debian Ubuntu
  • Unscored —
    CVE-2016-0760

    Multiple incomplete blacklist vulnerabilities in Apache Sentry before 1.7.0 allow remote authenticated users to execute…

  • Unscored —
    CVE-2016-4995

    Foreman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview provisioning templates, whi…

  • Unscored —
    CVE-2016-4451

    The (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenti…

  • Unscored —
    CVE-2016-4475

    The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote …

  • Unscored —
    CVE-2016-6493

    Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken …

  • Unscored —
    CVE-2016-6319

    Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Exec…

  • Unscored —
    CVE-2016-6320

    Cross-site scripting (XSS) vulnerability in app/assets/javascripts/host_edit_interfaces.js in Foreman before 1.12.2 all…