Overview 19,723 matches · 175 in Waratek scope · 34 protected · 0 exploited · 0 CISA KEV · 968 EPSS ≥ 0.5
19,723matches
175in Waratek scope0.9%
34protected0.2%
0exploited0.0%
0CISA KEV0.0%
968EPSS ≥ 0.54.9%
Protected by Waratek
34
0.2%
Rule in development
0
0.0%
Mitigation candidate
141
0.7%
No exploit published
0
0.0%
Outside Waratek scope
88
0.4%
Not applicable
19,385
98.3%
Withdrawn CVE
75
0.4%
blocked by ARMR today
34
0.2%
partly blocked
0
0.0%
not blocked
19,689
99.8%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
19,723
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 2,591 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199773
Not applicable73
High51
Medium18
Low4
not blocked73
Working exploit published73
199850
Not applicable50
Critical1
High33
Medium11
Low5
not blocked50
Working exploit published50
1999282
Outside Waratek scope1
Not applicable280
Withdrawn CVE1
Critical2
High132
Medium119
Low28
Unknown1
not blocked282
Working exploit published282
2000427
Mitigation candidate6
Outside Waratek scope1
Not applicable420
Critical1
High197
Medium195
Low34
not blocked427
Working exploit published427
2001480
Mitigation candidate2
Outside Waratek scope4
Not applicable474
Critical4
High219
Medium219
Low38
not blocked480
Working exploit published480
2002545
Mitigation candidate8
Outside Waratek scope4
Not applicable531
Withdrawn CVE2
Critical3
High276
Medium246
Low18
Unknown2
not blocked545
Working exploit published545
2003499
Protected by Waratek1
Mitigation candidate7
Outside Waratek scope2
Not applicable488
Withdrawn CVE1
Critical3
High236
Medium243
Low16
Unknown1
blocked by ARMR today1
not blocked498
Working exploit published499
2004755
Mitigation candidate1
Outside Waratek scope1
Not applicable753
Critical3
High302
Medium414
Low36
not blocked755
Working exploit published755
20051,341
Protected by Waratek1
Mitigation candidate4
Outside Waratek scope4
Not applicable1,327
Withdrawn CVE5
Critical4
High658
Medium622
Low52
Unknown5
blocked by ARMR today1
not blocked1,340
Working exploit published1,341
20062,440
Protected by Waratek1
Mitigation candidate4
Outside Waratek scope7
Not applicable2,425
Withdrawn CVE3
Critical4
High1,197
Medium1,137
Low99
Unknown3
blocked by ARMR today1
not blocked2,439
Working exploit published2,440
20072,495
Protected by Waratek1
Mitigation candidate10
Outside Waratek scope11
Not applicable2,470
Withdrawn CVE3
Critical6
High1,405
Medium1,052
Low29
Unknown3
blocked by ARMR today1
not blocked2,494
Working exploit published2,495
20082,518
Protected by Waratek3
Mitigation candidate9
Outside Waratek scope6
Not applicable2,495
Withdrawn CVE5
Critical4
High1,492
Medium987
Low30
Unknown5
blocked by ARMR today3
not blocked2,515
Working exploit published2,518
20092,591
Protected by Waratek4
Mitigation candidate12
Outside Waratek scope9
Not applicable2,560
Withdrawn CVE6
Critical5
High1,424
Medium1,123
Low33
Unknown6
blocked by ARMR today4
not blocked2,587
Working exploit published2,591
20101,313
Protected by Waratek3
Mitigation candidate11
Outside Waratek scope7
Not applicable1,290
Withdrawn CVE2
Critical6
High730
Medium547
Low28
Unknown2
blocked by ARMR today3
not blocked1,310
Working exploit published1,313
2011691
Protected by Waratek2
Mitigation candidate9
Outside Waratek scope5
Not applicable672
Withdrawn CVE3
Critical1
High380
Medium294
Low13
Unknown3
blocked by ARMR today2
not blocked689
Working exploit published691
2012831
Mitigation candidate19
Outside Waratek scope9
Not applicable798
Withdrawn CVE5
Critical2
High316
Medium475
Low33
Unknown5
not blocked831
Working exploit published831
2013520
Protected by Waratek3
Mitigation candidate14
Outside Waratek scope10
Not applicable473
Withdrawn CVE20
Critical2
High241
Medium237
Low20
Unknown20
blocked by ARMR today3
not blocked517
Working exploit published520
2014795
Protected by Waratek4
Mitigation candidate10
Outside Waratek scope1
Not applicable769
Withdrawn CVE11
Critical2
High340
Medium415
Low27
Unknown11
blocked by ARMR today4
not blocked791
Working exploit published795
2015647
Protected by Waratek4
Mitigation candidate4
Outside Waratek scope6
Not applicable628
Withdrawn CVE5
Critical4
High351
Medium254
Low33
Unknown5
blocked by ARMR today4
not blocked643
Working exploit published647
2016397
Protected by Waratek7
Mitigation candidate11
Not applicable377
Withdrawn CVE2
Critical54
High220
Medium117
Low4
Unknown2
blocked by ARMR today7
not blocked390
Working exploit published397
1989199219951998200120042007201020132016
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2016-1247 | High | 2016-11-29 | Not applicable | Working exploit published | The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log. |
| CVE-2016-6754 | High | 2016-11-25 | Not applicable | Working exploit published | A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website. This issue is rated as High due to the possibility of remote code execution in an unprivileged process. Android ID: A-31217937. |
| CVE-2016-6707 | High | 2016-11-25 | Not applicable | Working exploit published | An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Android ID: A-31350622. |
| CVE-2016-9151 | High | 2016-11-19 | Not applicable | Working exploit published | Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables. |
| CVE-2016-9150 | Critical | 2016-11-19 | Not applicable | Working exploit published | Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows remote attackers to execute arbitrary code via unspecified vectors. |
| CVE-2016-7241 | High | 2016-11-10 | Not applicable | Working exploit published | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." |
| CVE-2016-7240 | High | 2016-11-10 | Not applicable | Working exploit published | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7242, and CVE-2016-7243. |
| CVE-2016-7237 | Medium | 2016-11-10 | Not applicable | Working exploit published | Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote authenticated users to cause a denial of service (system hang) via a crafted request, aka "Local Security Authority Subsystem Service Denial of Service Vulnerability." |
| CVE-2016-7226 | Medium | 2016-11-10 | Not applicable | Working exploit published | Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability." |
| CVE-2016-7225 | Medium | 2016-11-10 | Not applicable | Working exploit published | Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability." |
| CVE-2016-7224 | Medium | 2016-11-10 | Not applicable | Working exploit published | Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability." |
| CVE-2016-7216 | Medium | 2016-11-10 | Not applicable | Working exploit published | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandles permissions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability." |
| CVE-2016-7202 | High | 2016-11-10 | Not applicable | Working exploit published | The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra JavaScript engine, a different vulnerability than CVE-2016-7200, CVE-2016-7201, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243. |
| CVE-2016-8812 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before GFE 3.1.0.52 contains a vulnerability in the kernel mode layer (nvstreamkms.sys) allowing a user to cause a stack buffer overflow with specially crafted executable paths, leading to a denial of service or escalation of privileges. |
| CVE-2016-8811 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x7000170 where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges. |
| CVE-2016-8810 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x100009a where a value passed from an user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges. |
| CVE-2016-8809 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70001b2 where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges. |
| CVE-2016-8808 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000d5 where a value passed from an user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges. |
| CVE-2016-8807 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x10000e9 where a value is passed from an user to the driver is used without validation as the size input to memcpy() causing a stack buffer overflow, leading to denial of service or potential escalation of privileges. |
| CVE-2016-8806 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x5000027 where a pointer passed from an user to the driver is used without validation, leading to denial of service or potential escalation of privileges. |
| CVE-2016-8805 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x7000014 where a value passed from an user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges. |
| CVE-2016-7851 | Medium | 2016-11-08 | Not applicable | Working exploit published | Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks. |
| CVE-2016-7391 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x100010b where a missing array bounds check can allow a user to write to kernel memory, leading to denial of service or potential escalation of privileges. |
| CVE-2016-7390 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x7000194 where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges. |
| CVE-2016-7387 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x600000D where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges. |
| CVE-2016-7386 | Medium | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x70000D4 which may lead to leaking of kernel memory contents to user space through an uninitialized buffer. |
| CVE-2016-7385 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape ID 0x700010d where a value passed from a user to the driver is used without validation as the index to an internal array, leading to denial of service or potential escalation of privileges. |
| CVE-2016-7384 | High | 2016-11-08 | Not applicable | Working exploit published | For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer (nvlddmkm.sys) where unchecked input/output lengths in UVMLiteController Device IO Control handling may lead to denial of service or potential escalation of privileges. |
| CVE-2016-9111 | Medium | 2016-11-07 | Not applicable | Working exploit published | Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the researcher was unable to provide us with information that would allow us to confirm the behaviour and, despite extensive investigation on test deployments of supported products, we were unable to reproduce the behaviour as he described. The researcher has also, despite additional requests for information, ceased to respond to us." |
| CVE-2016-9018 | Medium | 2016-10-28 | Not applicable | Working exploit published | Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a crafted .QCP media file. |
| CVE-2016-8582 | Critical | 2016-10-28 | Not applicable | Working exploit published | A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE. |
| CVE-2016-8581 | Medium | 2016-10-28 | Not applicable | Working exploit published | A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal session IDs of logged in users when the current sessions are viewed by an administrator. |
| CVE-2016-8580 | Critical | 2016-10-28 | Not applicable | Working exploit published | PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes. |
| CVE-2016-5764 | High | 2016-10-27 | Not applicable | Working exploit published | Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 (HF 14668). This can only occur if a client connects to a malicious server. |
| CVE-2016-5617 | Unknown | 2016-10-25 | Withdrawn CVE | Working exploit published | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6664. Reason: This candidate is a reservation duplicate of CVE-2016-6664. Notes: All CVE users should reference CVE-2016-6664 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage |
| CVE-2016-5616 | Unknown | 2016-10-25 | Withdrawn CVE | Working exploit published | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage |
| CVE-2016-3473 | High | 2016-10-25 | Mitigation candidate | Working exploit published | Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors. |
| CVE-2016-6828 | Medium | 2016-10-16 | Not applicable | Working exploit published | The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option. |
| CVE-2016-7194 | High | 2016-10-14 | Not applicable | Working exploit published | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016-7190. |
| CVE-2016-7190 | High | 2016-10-14 | Not applicable | Working exploit published | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016-7194. |
| CVE-2016-7189 | High | 2016-10-14 | Not applicable | Working exploit published | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability." |
| CVE-2016-7188 | High | 2016-10-14 | Not applicable | Working exploit published | The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability." |
| CVE-2016-7185 | High | 2016-10-14 | Not applicable | Working exploit published | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." a different vulnerability than CVE-2016-3266, CVE-2016-3376, and CVE-2016-7211. |
| CVE-2016-7182 | Critical | 2016-10-14 | Not applicable | Working exploit published | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Console allows attackers to execute arbitrary code via a crafted True Type font, aka "True Type Font Parsing Elevation of Privilege Vulnerability." |
| CVE-2016-3388 | Medium | 2016-10-14 | Not applicable | Working exploit published | Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3387. |
| CVE-2016-3387 | High | 2016-10-14 | Not applicable | Working exploit published | Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3388. |
| CVE-2016-3386 | High | 2016-10-14 | Not applicable | Working exploit published | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3389, CVE-2016-7190, and CVE-2016-7194. |
| CVE-2016-3376 | High | 2016-10-14 | Not applicable | Working exploit published | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." a different vulnerability than CVE-2016-3266, CVE-2016-7185, and CVE-2016-7211. |
| CVE-2016-3209 | Medium | 2016-10-14 | Not applicable | Working exploit published | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; Live Meeting 2007 Console; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4.5.2, and 4.6; and Silverlight 5 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "True Type Font Parsing Information Disclosure Vulnerability." |
| CVE-2016-0079 | Medium | 2016-10-14 | Not applicable | Working exploit published | The kernel in Microsoft Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability." |
| CVE-2016-0075 | Medium | 2016-10-14 | Not applicable | Working exploit published | The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0073. |
| CVE-2016-0073 | Medium | 2016-10-14 | Not applicable | Working exploit published | The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0075. |
| CVE-2016-0070 | Medium | 2016-10-14 | Not applicable | Working exploit published | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability." |
| CVE-2016-7065 | High | 2016-10-13 | Protected by Waratek | Working exploit published | The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object. |
| CVE-2016-5425 | High | 2016-10-13 | Mitigation candidate | Working exploit published | The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group. |
| CVE-2016-4273 | High | 2016-10-13 | Not applicable | Working exploit published | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990. |
| CVE-2016-6689 | Medium | 2016-10-10 | Not applicable | Working exploit published | Binder in the kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30768347. |
| CVE-2016-5348 | Medium | 2016-10-10 | Not applicable | Working exploit published | The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service (memory consumption, and device hang or reboot) via a large xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 29555864. |
| CVE-2016-1000155 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin wpsolr-search-engine v7.6 |
| CVE-2016-1000154 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin whizz v1.0.7 |
| CVE-2016-1000153 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin tidio-gallery v1.1 |
| CVE-2016-1000152 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin tidio-form v1.0 |
| CVE-2016-1000148 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin s3-video v0.983 |
| CVE-2016-1000146 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin pondol-formmail v1.1 |
| CVE-2016-1000143 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin photoxhibit v2.1.8 |
| CVE-2016-1000142 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin parsi-font v4.2.5 |
| CVE-2016-1000141 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin page-layout-builder v1.9.3 |
| CVE-2016-1000140 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin new-year-firework v1.1.9 |
| CVE-2016-1000139 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin infusionsoft v1.5.11 |
| CVE-2016-1000138 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin indexisto v1.0.5 |
| CVE-2016-1000137 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin hero-maps-pro v2.1.0 |
| CVE-2016-1000136 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin heat-trackr v1.0 |
| CVE-2016-1000135 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin hdw-tube v1.2 |
| CVE-2016-1000134 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin hdw-tube v1.2 |
| CVE-2016-1000133 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1 |
| CVE-2016-1000132 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8 |
| CVE-2016-1000131 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin e-search v1.0 |
| CVE-2016-1000130 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin e-search v1.0 |
| CVE-2016-1000129 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin defa-online-image-protector v3.3 |
| CVE-2016-1000128 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin anti-plagiarism v3.60 |
| CVE-2016-1000127 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin ajax-random-post v2.00 |
| CVE-2016-1000126 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin admin-font-editor v1.8 |
| CVE-2015-2080 | High | 2016-10-07 | Mitigation candidate | Working exploit published | The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak. |
| CVE-2016-6435 | Medium | 2016-10-06 | Not applicable | Working exploit published | The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376. |
| CVE-2016-6434 | High | 2016-10-06 | Not applicable | Working exploit published | Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CLI access, aka Bug ID CSCva30370. |
| CVE-2016-6433 | High | 2016-10-06 | Not applicable | Working exploit published | The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872. |
| CVE-2016-1000125 | Critical | 2016-10-06 | Not applicable | Working exploit published | Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla |
| CVE-2016-1000124 | Critical | 2016-10-06 | Not applicable | Working exploit published | Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 |
| CVE-2016-1000123 | Critical | 2016-10-06 | Not applicable | Working exploit published | Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla |
| CVE-2015-1000012 | High | 2016-10-06 | Not applicable | Working exploit published | Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin |
| CVE-2015-1000010 | High | 2016-10-06 | Not applicable | Working exploit published | Remote file download in simple-image-manipulator v1.0 wordpress plugin |
| CVE-2015-1000005 | High | 2016-10-06 | Not applicable | Working exploit published | Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin |
| CVE-2016-1240 | High | 2016-10-03 | Mitigation candidate | Working exploit published | The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out. |
| CVE-2016-7098 | High | 2016-09-26 | Not applicable | Working exploit published | Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open. |
| CVE-2016-4275 | High | 2016-09-14 | Not applicable | Working exploit published | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924. |
| CVE-2016-3373 | Medium | 2016-09-14 | Not applicable | Working exploit published | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does not properly implement registry access control, which allows local users to obtain sensitive account information via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability." |
| CVE-2016-3371 | Medium | 2016-09-14 | Not applicable | Working exploit published | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain sensitive information via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability." |
| CVE-2016-3357 | High | 2016-09-14 | Not applicable | Working exploit published | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server 2013 SP1, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." |
| CVE-2016-3325 | Low | 2016-09-14 | Not applicable | Working exploit published | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability." |
| CVE-2016-3324 | High | 2016-09-14 | Not applicable | Working exploit published | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." |