Skip to content
OpenAdvisories

Archive

September 2016

Vulnerabilities first published in this month (UTC), newest first.

← August 2016 2016 / September October 2016 →
  1. 116
  2. 219
  3. 38
  4. 4 
  5. 5 
  6. 66
  7. 737
  8. 84
  9. 914
  10. 101
  11. 1161
  12. 1224
  13. 13 
  14. 1476
  15. 15 
  16. 1615
  17. 1716
  18. 1828
  19. 199
  20. 2022
  21. 2143
  22. 2230
  23. 23 
  24. 2411
  25. 2577
  26. 2657
  27. 279
  28. 283
  29. 296
  30. 305
All Critical High Medium Low Exploited only Public exploit

23 results · Clear filters · Feed

  • Unscored —
    CVE-2016-2776 Public exploit EPSS 89%

    buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly…

    bind9 bind9 bind Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-7098 Public exploit

    Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allo…

    wget wget Debian Ubuntu
  • Unscored —
    CVE-2016-4845 Public exploit

    Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0,…

  • Unscored —
    CVE-2016-6662 Public exploit EPSS 68%

    Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.…

    percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mysql-5.7 Ubuntu Alpine
  • High 7.5
    CVE-2016-6415 Exploited Public exploit EPSS 88%

    The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.…

    KEV May 19, 2023
  • Unscored —
    CVE-2016-4275 Public exploit EPSS 19%

    Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.63…

  • Unscored —
    CVE-2016-3371 Public exploit EPSS 40%

    The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows …

  • Unscored —
    CVE-2016-3373 Public exploit EPSS 17%

    The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows …

  • Unscored —
    CVE-2016-3324 Public exploit EPSS 28%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2016-3325 Public exploit EPSS 54%

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted …

  • Unscored —
    CVE-2016-3247 Public exploit EPSS 71%

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of…

  • Unscored —
    CVE-2016-3357 Public exploit EPSS 55%

    Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2…

  • Unscored —
    CVE-2016-3861 Public exploit

    LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 201…

    android android-platform-system-core android-platform-system-core Debian Ubuntu
  • High 7.5
    CVE-2016-6317 Public exploit

    ActiveRecord in Ruby on Rails allows database-query bypass

    Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and …

    rails activerecord Debian RubyGems
  • Unscored —
    CVE-2016-6855 Public exploit EPSS 18%

    Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib befo…

    eog eog Debian Ubuntu
  • Unscored —
    CVE-2016-1415 Public exploit

    Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2016-1464 Public exploit

    Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2016-0772 Public exploit EPSS 15%

    The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an …

    python3.4 python3.5 python2.7 python2.7 Debian Ubuntu
  • Unscored —
    CVE-2016-5699 Public exploit

    CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) bef…

    python3.4 python2.7 python2.7 Debian Ubuntu
  • Unscored —
    CVE-2016-5636 Public exploit EPSS 25%

    Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3…

    python3.4 python3.5 python2.7 python2.7 Debian Ubuntu
  • Unscored —
    CVE-2016-6483 Public exploit EPSS 13%

    The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch L…

  • Unscored —
    CVE-2016-4264 Public exploit EPSS 69%

    The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attac…

  • High 7.5
    CVE-2016-2183 Public exploit EPSS 95%

    The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…

    openjdk-8 openjdk-7 openssl openssl Ubuntu Alpine