Overview 20,287 matches · 203 in Waratek scope · 56 protected · 527 exploited · 158 CISA KEV · 1,276 EPSS ≥ 0.5
20,287matches
203in Waratek scope1.0%
56protected0.3%
527exploited2.6%
158CISA KEV0.8%
1,276EPSS ≥ 0.56.3%
Protected by Waratek
57
0.3%
Rule in development
0
0.0%
Mitigation candidate
146
0.7%
No exploit published
0
0.0%
Outside Waratek scope
116
0.6%
Not applicable
19,893
98.1%
Withdrawn CVE
75
0.4%
blocked by ARMR today
56
0.3%
partly blocked
1
0.0%
not blocked
20,230
99.7%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
527
2.6%
Working exploit published
19,694
97.1%
Proof of concept only
66
0.3%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 2,638 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199775
Not applicable75
High53
Medium18
Low4
not blocked75
Exploited2
Working exploit published73
199851
Not applicable51
Critical1
High34
Medium11
Low5
not blocked51
Exploited1
Working exploit published50
1999283
Outside Waratek scope1
Not applicable281
Withdrawn CVE1
Critical2
High133
Medium119
Low28
Unknown1
not blocked283
Exploited1
Working exploit published282
2000431
Mitigation candidate6
Outside Waratek scope1
Not applicable424
Critical1
High200
Medium196
Low34
not blocked431
Exploited4
Working exploit published427
2001490
Mitigation candidate2
Outside Waratek scope4
Not applicable484
Critical4
High229
Medium219
Low38
not blocked490
Exploited10
Working exploit published480
2002551
Mitigation candidate8
Outside Waratek scope4
Not applicable537
Withdrawn CVE2
Critical3
High282
Medium246
Low18
Unknown2
not blocked551
Exploited6
Working exploit published545
2003508
Protected by Waratek1
Mitigation candidate7
Outside Waratek scope2
Not applicable497
Withdrawn CVE1
Critical3
High245
Medium243
Low16
Unknown1
blocked by ARMR today1
not blocked507
Exploited9
Working exploit published499
2004768
Mitigation candidate1
Outside Waratek scope1
Not applicable766
Critical4
High311
Medium417
Low36
not blocked768
Exploited13
Working exploit published755
20051,361
Protected by Waratek1
Mitigation candidate4
Outside Waratek scope4
Not applicable1,347
Withdrawn CVE5
Critical5
High669
Medium628
Low54
Unknown5
blocked by ARMR today1
not blocked1,360
Exploited20
Working exploit published1,341
20062,462
Protected by Waratek1
Mitigation candidate4
Outside Waratek scope7
Not applicable2,447
Withdrawn CVE3
Critical4
High1,214
Medium1,142
Low99
Unknown3
blocked by ARMR today1
not blocked2,461
Exploited21
Working exploit published2,440
Proof of concept only1
20072,528
Protected by Waratek1
Mitigation candidate10
Outside Waratek scope12
Not applicable2,502
Withdrawn CVE3
Critical8
High1,430
Medium1,057
Low30
Unknown3
blocked by ARMR today1
not blocked2,527
Exploited31
Working exploit published2,495
Proof of concept only2
20082,546
Protected by Waratek4
Mitigation candidate9
Outside Waratek scope6
Not applicable2,522
Withdrawn CVE5
Critical6
High1,514
Medium991
Low30
Unknown5
blocked by ARMR today4
not blocked2,542
Exploited25
Working exploit published2,518
Proof of concept only3
20092,638
Protected by Waratek4
Mitigation candidate13
Outside Waratek scope9
Not applicable2,606
Withdrawn CVE6
Critical7
High1,457
Medium1,135
Low33
Unknown6
blocked by ARMR today4
not blocked2,634
Exploited46
Working exploit published2,591
Proof of concept only1
20101,367
Protected by Waratek5
Mitigation candidate11
Outside Waratek scope13
Not applicable1,336
Withdrawn CVE2
Critical10
High770
Medium557
Low28
Unknown2
blocked by ARMR today5
not blocked1,362
Exploited53
Working exploit published1,313
Proof of concept only1
2011718
Protected by Waratek3
Mitigation candidate9
Outside Waratek scope8
Not applicable695
Withdrawn CVE3
Critical3
High398
Medium300
Low14
Unknown3
blocked by ARMR today3
not blocked715
Exploited22
Working exploit published691
Proof of concept only5
2012868
Protected by Waratek3
Mitigation candidate19
Outside Waratek scope14
Not applicable827
Withdrawn CVE5
Critical9
High335
Medium485
Low34
Unknown5
blocked by ARMR today3
not blocked865
Exploited31
Working exploit published831
Proof of concept only6
2013586
Protected by Waratek7
Mitigation candidate15
Outside Waratek scope19
Not applicable525
Withdrawn CVE20
Critical10
High284
Medium250
Low22
Unknown20
blocked by ARMR today7
not blocked579
Exploited64
Working exploit published520
Proof of concept only2
2014868
Protected by Waratek7
Mitigation candidate12
Outside Waratek scope4
Not applicable834
Withdrawn CVE11
Critical9
High385
Medium435
Low28
Unknown11
blocked by ARMR today7
not blocked861
Exploited60
Working exploit published795
Proof of concept only13
2015724
Protected by Waratek7
Mitigation candidate5
Outside Waratek scope7
Not applicable700
Withdrawn CVE5
Critical16
High393
Medium276
Low34
Unknown5
blocked by ARMR today7
not blocked717
Exploited62
Working exploit published647
Proof of concept only15
2016431
Protected by Waratek13
Mitigation candidate11
Not applicable405
Withdrawn CVE2
Critical68
High238
Medium119
Low4
Unknown2
blocked by ARMR today12
partly blocked1
not blocked418
Exploited46
Working exploit published368
Proof of concept only17
1989199219951998200120042007201020132016
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2016-9018 | Medium | 2016-10-28 | Not applicable | Working exploit published | Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a crafted .QCP media file. |
| CVE-2016-8582 | Critical | 2016-10-28 | Not applicable | Working exploit published | A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE. |
| CVE-2016-8581 | Medium | 2016-10-28 | Not applicable | Working exploit published | A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal session IDs of logged in users when the current sessions are viewed by an administrator. |
| CVE-2016-8580 | Critical | 2016-10-28 | Not applicable | Working exploit published | PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes. |
| CVE-2016-5764 | High | 2016-10-27 | Not applicable | Working exploit published | Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 (HF 14668). This can only occur if a client connects to a malicious server. |
| CVE-2016-5617 | Unknown | 2016-10-25 | Withdrawn CVE | Working exploit published | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6664. Reason: This candidate is a reservation duplicate of CVE-2016-6664. Notes: All CVE users should reference CVE-2016-6664 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage |
| CVE-2016-5616 | Unknown | 2016-10-25 | Withdrawn CVE | Working exploit published | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage |
| CVE-2016-3473 | High | 2016-10-25 | Mitigation candidate | Working exploit published | Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, and 12.2.1.0.0 allows remote authenticated users to affect confidentiality via unknown vectors. |
| CVE-2016-6828 | Medium | 2016-10-16 | Not applicable | Working exploit published | The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option. |
| CVE-2016-7194 | High | 2016-10-14 | Not applicable | Working exploit published | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016-7190. |
| CVE-2016-7190 | High | 2016-10-14 | Not applicable | Working exploit published | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016-7194. |
| CVE-2016-7189 | High | 2016-10-14 | Not applicable | Working exploit published | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability." |
| CVE-2016-7188 | High | 2016-10-14 | Not applicable | Working exploit published | The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability." |
| CVE-2016-7185 | High | 2016-10-14 | Not applicable | Working exploit published | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." a different vulnerability than CVE-2016-3266, CVE-2016-3376, and CVE-2016-7211. |
| CVE-2016-7182 | Critical | 2016-10-14 | Not applicable | Working exploit published | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Console allows attackers to execute arbitrary code via a crafted True Type font, aka "True Type Font Parsing Elevation of Privilege Vulnerability." |
| CVE-2016-3388 | Medium | 2016-10-14 | Not applicable | Working exploit published | Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3387. |
| CVE-2016-3387 | High | 2016-10-14 | Not applicable | Working exploit published | Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3388. |
| CVE-2016-3386 | High | 2016-10-14 | Not applicable | Working exploit published | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3389, CVE-2016-7190, and CVE-2016-7194. |
| CVE-2016-3376 | High | 2016-10-14 | Not applicable | Working exploit published | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." a different vulnerability than CVE-2016-3266, CVE-2016-7185, and CVE-2016-7211. |
| CVE-2016-3209 | Medium | 2016-10-14 | Not applicable | Working exploit published | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; Live Meeting 2007 Console; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4.5.2, and 4.6; and Silverlight 5 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "True Type Font Parsing Information Disclosure Vulnerability." |
| CVE-2016-0079 | Medium | 2016-10-14 | Not applicable | Working exploit published | The kernel in Microsoft Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability." |
| CVE-2016-0075 | Medium | 2016-10-14 | Not applicable | Working exploit published | The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0073. |
| CVE-2016-0073 | Medium | 2016-10-14 | Not applicable | Working exploit published | The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0075. |
| CVE-2016-0070 | Medium | 2016-10-14 | Not applicable | Working exploit published | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability." |
| CVE-2016-7065 | High | 2016-10-13 | Protected by Waratek | Working exploit published | The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object. |
| CVE-2016-5425 | High | 2016-10-13 | Mitigation candidate | Working exploit published | The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group. |
| CVE-2016-4273 | High | 2016-10-13 | Not applicable | Working exploit published | Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990. |
| CVE-2016-6689 | Medium | 2016-10-10 | Not applicable | Working exploit published | Binder in the kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30768347. |
| CVE-2016-5348 | Medium | 2016-10-10 | Not applicable | Working exploit published | The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service (memory consumption, and device hang or reboot) via a large xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 29555864. |
| CVE-2016-1000155 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin wpsolr-search-engine v7.6 |
| CVE-2016-1000154 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin whizz v1.0.7 |
| CVE-2016-1000153 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin tidio-gallery v1.1 |
| CVE-2016-1000152 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin tidio-form v1.0 |
| CVE-2016-1000149 | Medium | 2016-10-10 | Not applicable | Exploited | Reflected XSS in wordpress plugin simpel-reserveren v3.5.2 |
| CVE-2016-1000148 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin s3-video v0.983 |
| CVE-2016-1000146 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin pondol-formmail v1.1 |
| CVE-2016-1000143 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin photoxhibit v2.1.8 |
| CVE-2016-1000142 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin parsi-font v4.2.5 |
| CVE-2016-1000141 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin page-layout-builder v1.9.3 |
| CVE-2016-1000140 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin new-year-firework v1.1.9 |
| CVE-2016-1000139 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin infusionsoft v1.5.11 |
| CVE-2016-1000138 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin indexisto v1.0.5 |
| CVE-2016-1000137 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin hero-maps-pro v2.1.0 |
| CVE-2016-1000136 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin heat-trackr v1.0 |
| CVE-2016-1000135 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin hdw-tube v1.2 |
| CVE-2016-1000134 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin hdw-tube v1.2 |
| CVE-2016-1000133 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1 |
| CVE-2016-1000132 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8 |
| CVE-2016-1000131 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin e-search v1.0 |
| CVE-2016-1000130 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin e-search v1.0 |
| CVE-2016-1000129 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin defa-online-image-protector v3.3 |
| CVE-2016-1000128 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin anti-plagiarism v3.60 |
| CVE-2016-1000127 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin ajax-random-post v2.00 |
| CVE-2016-1000126 | Medium | 2016-10-10 | Not applicable | Working exploit published | Reflected XSS in wordpress plugin admin-font-editor v1.8 |
| CVE-2015-2080 | High | 2016-10-07 | Mitigation candidate | Working exploit published | The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak. |
| CVE-2016-6435 | Medium | 2016-10-06 | Not applicable | Working exploit published | The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376. |
| CVE-2016-6434 | High | 2016-10-06 | Not applicable | Working exploit published | Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CLI access, aka Bug ID CSCva30370. |
| CVE-2016-6433 | High | 2016-10-06 | Not applicable | Working exploit published | The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872. |
| CVE-2016-1000125 | Critical | 2016-10-06 | Not applicable | Working exploit published | Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla |
| CVE-2016-1000124 | Critical | 2016-10-06 | Not applicable | Working exploit published | Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 |
| CVE-2016-1000123 | Critical | 2016-10-06 | Not applicable | Working exploit published | Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla |
| CVE-2015-1000012 | High | 2016-10-06 | Not applicable | Working exploit published | Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin |
| CVE-2015-1000010 | High | 2016-10-06 | Not applicable | Working exploit published | Remote file download in simple-image-manipulator v1.0 wordpress plugin |
| CVE-2015-1000005 | High | 2016-10-06 | Not applicable | Working exploit published | Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin |
| CVE-2016-1240 | High | 2016-10-03 | Mitigation candidate | Working exploit published | The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out. |
| CVE-2016-2776 | High | 2016-09-28 | Not applicable | Exploited | buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query. |
| CVE-2016-7098 | High | 2016-09-26 | Not applicable | Working exploit published | Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open. |
| CVE-2016-6662 | Critical | 2016-09-20 | Not applicable | Exploited | Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL version information is from Oracle's October 2016 CPU. Oracle has not commented on third-party claims that the issue was silently patched in MySQL 5.5.52, 5.6.33, and 5.7.15. |
| CVE-2016-6415 | High | 2016-09-19 | Not applicable | Exploited | The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN. |
| CVE-2016-4275 | High | 2016-09-14 | Not applicable | Working exploit published | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924. |
| CVE-2016-3373 | Medium | 2016-09-14 | Not applicable | Working exploit published | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does not properly implement registry access control, which allows local users to obtain sensitive account information via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability." |
| CVE-2016-3371 | Medium | 2016-09-14 | Not applicable | Working exploit published | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain sensitive information via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability." |
| CVE-2016-3357 | High | 2016-09-14 | Not applicable | Working exploit published | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server 2013 SP1, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." |
| CVE-2016-3325 | Low | 2016-09-14 | Not applicable | Working exploit published | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability." |
| CVE-2016-3324 | High | 2016-09-14 | Not applicable | Working exploit published | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." |
| CVE-2016-3247 | High | 2016-09-14 | Not applicable | Working exploit published | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." |
| CVE-2016-3861 | High | 2016-09-11 | Not applicable | Working exploit published | LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted file, aka internal bug 29250543. |
| CVE-2016-6855 | High | 2016-09-07 | Not applicable | Working exploit published | Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup. |
| CVE-2016-1464 | High | 2016-09-03 | Not applicable | Working exploit published | Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375. |
| CVE-2016-1415 | Medium | 2016-09-03 | Not applicable | Working exploit published | Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted file, aka Bug ID CSCuz80455. |
| CVE-2016-6483 | High | 2016-09-02 | Not applicable | Working exploit published | The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6, 4.2.3 before Patch Level 2, 5.x before 5.2.0 Patch Level 3, 5.2.1 before Patch Level 1, and 5.2.2 before Patch Level 1 allows remote attackers to conduct SSRF attacks via a crafted URL that results in a Redirection HTTP status code. |
| CVE-2016-0772 | Medium | 2016-09-02 | Not applicable | Working exploit published | The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack." |
| CVE-2016-4264 | High | 2016-09-01 | Not applicable | Working exploit published | The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via a crafted OOXML spreadsheet containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. |
| CVE-2016-5680 | High | 2016-08-31 | Not applicable | Exploited | Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code via the sn parameter to the transfer_license command. |
| CVE-2016-5679 | High | 2016-08-31 | Not applicable | Exploited | cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_license command. |
| CVE-2016-5678 | Critical | 2016-08-31 | Not applicable | Working exploit published | NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative access via unspecified vectors. |
| CVE-2016-5677 | High | 2016-08-31 | Not applicable | Working exploit published | NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an __nvr_status___.php request. |
| CVE-2016-5676 | High | 2016-08-31 | Not applicable | Working exploit published | cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefconfig action. |
| CVE-2016-5675 | Critical | 2016-08-31 | Not applicable | Working exploit published | handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter. |
| CVE-2016-5674 | Critical | 2016-08-31 | Not applicable | Exploited | __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter. |
| CVE-2016-6195 | Critical | 2016-08-30 | Not applicable | Exploited | SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows remote attackers to execute arbitrary SQL commands via the postids parameter to forumrunner/request.php, as exploited in the wild in July 2016. |
| CVE-2015-5399 | Medium | 2016-08-26 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in PHPVibe before 4.21 allows remote authenticated users to inject arbitrary web script or HTML via a comment. |
| CVE-2016-4657 | High | 2016-08-25 | Not applicable | Exploited | WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. |
| CVE-2016-4656 | High | 2016-08-25 | Not applicable | Exploited | The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. |
| CVE-2016-4655 | Medium | 2016-08-25 | Not applicable | Exploited | The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. |
| CVE-2016-7089 | High | 2016-08-24 | Not applicable | Exploited | WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN. |
| CVE-2016-6909 | Critical | 2016-08-24 | Not applicable | Exploited | Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 allows remote attackers to execute arbitrary code via a crafted HTTP request, aka EGREGIOUSBLUNDER. |
| CVE-2016-6367 | High | 2016-08-18 | Not applicable | Exploited | Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA. |
| CVE-2016-6366 | High | 2016-08-18 | Not applicable | Exploited | Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON. |
| CVE-2016-5847 | Medium | 2016-08-13 | Not applicable | Working exploit published | SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security Note 2327384. |