Archive
August 2016
Vulnerabilities first published in this month (UTC), newest first.
409 results · Feed
-
Unscored —CVE-2016-3299 EPSS 14%
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold a…
-
High 7.8
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;…
KEV Mar 15, 2022 -
Unscored —CVE-2016-3315 EPSS 30%
Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain se…
-
Unscored —CVE-2016-3289 EPSS 18%
Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "M…
-
Unscored —CVE-2016-3319 EPSS 19%
The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge…
-
Unscored —CVE-2016-3329 EPSS 16%
Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a craf…
-
Unscored —CVE-2016-3290 EPSS 16%
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet …
-
Unscored —
Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a cra…
-
Unscored —
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote a…
-
Unscored —CVE-2016-3308 Public exploit
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;…
-
Unscored —
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet …
-
Unscored —
The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007…
-
Unscored —CVE-2016-3327 EPSS 16%
Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted …
-
Unscored —
The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers t…
-
Unscored —
The Backup functionality in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows attackers to obtain sensitive info…
-
Unscored —
Adobe Experience Manager 6.0, 6.1, and 6.2 allow attackers to obtain sensitive audit log event information via unspecif…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inj…
-
Unscored —
The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature is not enabled, all…
-
Unscored —
IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes it easier for man-i…
-
Unscored —
IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 uses default file pe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server Framework and Info…
-
Unscored —
IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, when the Spectrum S…
-
Unscored —
IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka IBM Spectrum Protect for Databa…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace 4.0.2 allows remote authenticated users to inject arb…
-
Unscored —
IBM Security QRadar SIEM 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS command…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 be…
-
Unscored —CVE-2016-2960 EPSS 40%
IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x a…
-
Unscored —
Open redirect vulnerability in the Connections Portlets component 5.x before 5.0.2 for IBM WebSphere Portal allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 …
-
Unscored —
Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 befo…
-
Unscored —
CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbi…
-
Unscored —
Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 …
-
Unscored —
Open redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote authenticated users to redirec…
-
Unscored —CVE-2015-6396 Public exploit
The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell comman…
-
Unscored —
Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows rem…
-
Unscored —
Cisco RV180 and RV180W devices allow remote authenticated users to execute arbitrary commands as root via a crafted HTT…
-
Unscored —
Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote a…
-
Unscored —
The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authe…
-
Unscored —
Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) …