Skip to content
OpenAdvisories

Latest vulnerabilities

Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.

Tracked
409,455
Last 24h
639
Critical, 7 days
339
Known exploited
1,779
All Critical High Medium Low Exploited only Public exploit

931 results · Clear filters · Feed

  • High 8.8
    CVE-2016-7855 Exploited Public exploit EPSS 25%

    Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Lin…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-7193 Exploited EPSS 58%

    Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-3393 Exploited EPSS 68%

    Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows…

    KEV May 25, 2022
  • High 7.5
    CVE-2016-6415 Exploited Public exploit EPSS 88%

    The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.…

    KEV May 19, 2023
  • High 8.8
    CVE-2016-4657 Exploited Public exploit EPSS 67%

    WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory…

    qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
    KEV May 24, 2022
  • High 7.8
    CVE-2016-4656 Exploited Public exploit EPSS 24%

    The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a deni…

    KEV May 24, 2022
  • High 7.8
    CVE-2016-6367 Exploited Public exploit EPSS 23%

    Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows lo…

    KEV May 24, 2022
  • High 8.8
    CVE-2016-6366 Exploited Public exploit EPSS 88%

    Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Servic…

    KEV May 24, 2022
  • High 7.8
    CVE-2016-3309 Exploited · Ransomware Public exploit EPSS 20%

    The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;…

    KEV Mar 15, 2022
  • High 7.8
    CVE-2016-3643 Exploited Public exploit

    SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfigurati…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2016-4171 Exploited EPSS 20%

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary cod…

    flashplugin-nonfree Ubuntu
    KEV Mar 25, 2022
  • High 7.8
    CVE-2016-3235 Exploited Public exploit EPSS 43%

    Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mish…

    KEV Nov 3, 2021
  • High 7.5
    CVE-2016-4523 Exploited EPSS 31%

    The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause …

    KEV Apr 15, 2022
  • High 7.5
    CVE-2016-0189 Exploited · Ransomware Public exploit EPSS 94%

    The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other…

    KEV Mar 28, 2022
  • High 7.8
    CVE-2016-0185 Exploited Public exploit EPSS 70%

    Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrar…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2016-4117 Exploited · Ransomware Public exploit EPSS 94%

    Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 8.4
    CVE-2016-3714 Exploited Public exploit EPSS 97%

    The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6…

    imagemagick imagemagick graphicsmagick graphicsmagick Debian Ubuntu
    KEV Sep 9, 2024
  • High 8.1
    CVE-2016-3081 Exploited Public exploit Scanner template EPSS 97%

    Apache Struts RCE Vulnerability

    Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.

    org.apache.struts:struts2-core Maven
    KEV Oct 8, 2026
  • High 7.8
    CVE-2016-0165 Exploited Public exploit EPSS 14%

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …

    KEV Jun 22, 2023
  • High 7.8
    CVE-2016-0167 Exploited · Ransomware

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, …

    KEV Nov 3, 2021
  • High 7.8
    CVE-2016-0151 Exploited · Ransomware Public exploit EPSS 63%

    The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…

    KEV Mar 28, 2022
  • High 7.5
    CVE-2016-3976 Exploited Public exploit EPSS 47%

    Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary fi…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2016-1019 Exploited · Ransomware EPSS 22%

    Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or p…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 8.8
    CVE-2016-1646 Exploited EPSS 48%

    The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, d…

    chromium-browser oxide-qt libv8-3.14 Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2016-1010 Exploited EPSS 19%

    Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X an…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2016-0099 Exploited · Ransomware Public exploit EPSS 37%

    The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows …

    KEV Mar 3, 2022
  • High 7.5
    CVE-2016-0752 Exploited Public exploit EPSS 96%

    Directory traversal vulnerability in Action View in Ruby on Rails

    Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted …

    rails actionpack actionview Debian RubyGems
    KEV Mar 25, 2022
  • High 8.8
    CVE-2016-0984 Exploited Public exploit EPSS 55%

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2016-0040 Exploited Public exploit EPSS 24%

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to …

    KEV Mar 28, 2022
  • High 8.8
    CVE-2016-0034 Exploited · Ransomware EPSS 69%

    Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers t…

    KEV May 25, 2022
  • High 8.8
    CVE-2015-8651 Exploited EPSS 68%

    Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and be…

    flashplugin-nonfree Ubuntu
    KEV May 25, 2022
  • High 7.8
    CVE-2015-6175 Exploited

    The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows K…

    KEV May 25, 2022
  • High 7.8
    CVE-2015-5287 Exploited Public exploit

    The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain per…

    KEV Aug 26, 2026
  • High 7.5
    CVE-2015-5317 Exploited EPSS 23%

    Jenkins discloses project names via fingerprints

    The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

    org.jenkins-ci.main:jenkins-core Maven
    KEV May 12, 2023
  • High 7.8
    CVE-2015-7645 Exploited · Ransomware Public exploit EPSS 65%

    Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.53…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-2545 Exploited EPSS 86%

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a …

    KEV Mar 3, 2022
  • High 8.2
    CVE-2015-2546 Exploited · Ransomware Public exploit EPSS 10%

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wi…

    KEV Mar 15, 2022
  • High 8.8
    CVE-2015-2502 Exploited EPSS 51%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-1642 Exploited EPSS 53%

    Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted docum…

    KEV Mar 3, 2022
  • High 7.4
    CVE-2015-3246 Exploited Public exploit

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly mo…

    libuser libuser Debian Ubuntu
    KEV Aug 26, 2026