Skip to content
OpenAdvisories

Archive

November 2016

Vulnerabilities first published in this month (UTC), newest first.

← October 2016 2016 / November December 2016 →
  1. 11
  2. 21
  3. 322
  4. 421
  5. 5 
  6. 6 
  7. 72
  8. 835
  9. 9 
  10. 1075
  11. 119
  12. 122
  13. 13 
  14. 147
  15. 155
  16. 1613
  17. 175
  18. 186
  19. 1913
  20. 20 
  21. 21 
  22. 2210
  23. 236
  24. 2411
  25. 2578
  26. 26 
  27. 27 
  28. 2815
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

39 results · Clear filters · Feed

  • Unscored —
    CVE-2016-1247 Public exploit

    The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LT…

    nginx nginx Debian Ubuntu
  • Unscored —
    CVE-2015-1328 Public exploit EPSS 38%

    The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does n…

    linux linux-lts-utopic linux-lts-vivid Ubuntu
  • Unscored —
    CVE-2016-6754 Public exploit

    A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016…

    Google Android android Android Ubuntu
  • Unscored —
    CVE-2016-6707 Public exploit

    An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 cou…

    Google Android android Android Ubuntu
  • Unscored —
    CVE-2016-9150 Public exploit EPSS 35%

    Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x …

  • Unscored —
    CVE-2016-9151 Public exploit

    Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.…

  • High 7.0
    CVE-2016-5195 Exploited Public exploit EPSS 84%

    Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by le…

    linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu
    KEV Mar 3, 2022
  • Unscored —
    CVE-2016-7224 Public exploit

    Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 15…

  • Unscored —
    CVE-2016-7237 Public exploit EPSS 67%

    Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, …

  • High 7.5
    CVE-2016-7203 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2016-7202 Public exploit EPSS 74%

    ChakraCore RCE Vulnerability

    The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerabilit…

    Microsoft.ChakraCore NuGet
  • High 7.8
    CVE-2016-7255 Exploited · Ransomware Public exploit EPSS 81%

    The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,…

    KEV Nov 3, 2021
  • High 8.8
    CVE-2016-7200 Exploited Public exploit EPSS 83%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
    KEV Mar 28, 2022
  • High 8.8
    CVE-2016-7201 Exploited Public exploit EPSS 80%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
    KEV Mar 28, 2022
  • High 7.5
    CVE-2016-7240 Public exploit EPSS 66%

    ChakraCore RCE Vulnerability

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabili…

    Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2016-7216 Public exploit

    The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandles permiss…

  • Unscored —
    CVE-2016-7241 Public exploit EPSS 73%

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of…

  • Unscored —
    CVE-2016-7225 Public exploit

    Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access t…

  • Unscored —
    CVE-2016-7226 Public exploit

    Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access t…

  • Unscored —
    CVE-2016-7387 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-7384 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-7390 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-7391 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-7386 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-7385 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-8809 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-8805 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-8808 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-8810 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-8812 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before …

  • Unscored —
    CVE-2016-8811 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-8806 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-8807 Public exploit

    For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before …

  • Unscored —
    CVE-2016-7851 Public exploit

    Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vuln…

  • Unscored —
    CVE-2016-9111 Public exploit

    Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication …

  • Unscored —
    CVE-2016-8869 Public exploit EPSS 97%

    The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! befor…

  • Unscored —
    CVE-2016-8870 Public exploit EPSS 81%

    The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! befor…

  • High 7.5
    CVE-2016-9177 Public exploit

    Spark allows remote attackers to read arbitrary files via a .. (dot dot) in the URI

    Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

    com.sparkjava:spark-core Maven
  • High 8.8
    CVE-2016-7855 Exploited Public exploit EPSS 25%

    Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Lin…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022