Archive
December 2016
Vulnerabilities first published in this month (UTC), newest first.
38 results · Clear filters · Feed
-
Critical 9.8
Remote code execution in PHPMailer
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping perf…
-
Critical 9.8
zend-mail remote code execution via Sendmail adapter
The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute ar…
-
Critical 9.8
Remote code execution in PHPMailer
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.
KEV Jul 7, 2025 -
Critical 9.8
Swift Mailer mail transport Command Injection
The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address…
-
Unscored —CVE-2016-10081 Public exploit
/usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a cr…
-
Unscored —
VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which ma…
-
Unscored —CVE-2016-7083 Public exploit
VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado Thi…
-
Unscored —CVE-2016-7084 Public exploit
tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, wh…
-
Unscored —CVE-2016-9793 Public exploit
The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk_sndb…
-
Unscored —CVE-2016-10031 Public exploit
WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SY…
-
Medium 6.1CVE-2016-10006 Public exploit
OWASP AntiSamy vulnerable to Cross-site Scripting
In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serve…
-
Unscored —
The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary …
-
Unscored —
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (…
-
Unscored —CVE-2016-7454 Public exploit
CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421…
-
Unscored —CVE-2016-9951 Public exploit
An issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a restart command in `Respaw…
-
Unscored —
An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates …
-
Unscored —CVE-2016-9950 Public exploit
An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and…
-
Unscored —CVE-2016-8823 Public exploit
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEs…
-
Unscored —
An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of…
-
Unscored —CVE-2016-9566 Public exploit
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain roo…
-
Unscored —
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write…
-
Unscored —
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitati…
-
Unscored —CVE-2016-6853 Public exploit
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code and references to external websites can…
-
Unscored —CVE-2016-6851 Public exploit
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided as parameter to the OX …
-
Unscored —CVE-2016-6854 Public exploit
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inlin…
-
Unscored —CVE-2016-5740 Public exploit
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be used as part of ical att…
-
High 8.8
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.…
KEV Mar 7, 2022 -
Unscored —CVE-2016-9192 Public exploit
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to …
-
Unscored —
Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allow…
-
Unscored —CVE-2016-6664 Public exploit
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server bef…
-
Unscored —CVE-2016-6663 Public exploit
Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB b…
-
High 7.5
The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of…
-
Unscored —CVE-2016-9920 Public exploit
steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sen…
-
Unscored —
Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or ca…
-
Unscored —
The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h…
-
Unscored —
Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP pr…