Skip to content
OpenAdvisories

Archive

30 December 2016

Vulnerabilities first published on this day (UTC), newest first.

← November 2016 2016 / December /30 January 2017 →
  1. 111
  2. 22
  3. 39
  4. 4 
  5. 57
  6. 62
  7. 7 
  8. 813
  9. 919
  10. 1017
  11. 1148
  12. 1234
  13. 1342
  14. 1442
  15. 1559
  16. 1625
  17. 179
  18. 1813
  19. 192
  20. 2044
  21. 213
  22. 226
  23. 2329
  24. 244
  25. 252
  26. 263
  27. 272
  28. 2813
  29. 2943
  30. 309
  31. 316
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Critical 9.8
    CVE-2016-10045 Public exploit EPSS 98%

    Remote code execution in PHPMailer

    The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping perf…

    phpmailer/phpmailer libphp-phpmailer php5-phpmailer php-phpmailer Ubuntu Alpine Packagist
  • Critical 9.8
    CVE-2016-10034 Public exploit EPSS 38%

    zend-mail remote code execution via Sendmail adapter

    The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute ar…

    zendframework/zend-mail Packagist
  • Critical 9.8
    CVE-2016-10033 Exploited Public exploit Scanner template EPSS 100%

    Remote code execution in PHPMailer

    The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.

    phpmailer/phpmailer libphp-phpmailer libphp-phpmailer php-phpmailer Debian Ubuntu Alpine Packagist
    KEV Jul 7, 2025
  • Critical 9.8
    CVE-2016-10074 Public exploit EPSS 44%

    Swift Mailer mail transport Command Injection

    The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address…

    swiftmailer/swiftmailer libphp-swiftmailer libphp-swiftmailer Debian Ubuntu Packagist
  • Unscored —
    CVE-2016-10088

    The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where t…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2016-10083

    Cross-site scripting (XSS) vulnerability in admin/plugin.php in Piwigo through 2.8.3 allows remote attackers to inject …

  • Unscored —
    CVE-2016-10084

    admin/batch_manager.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion at…

  • Unscored —
    CVE-2016-10085

    admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attack…

  • Unscored —
    CVE-2016-10082

    include/functions_installer.inc.php in Serendipity through 2.0.5 is vulnerable to File Inclusion and a possible Code Ex…