ID | Summary | Flags | Max Score |
---|---|---|---|
CVE-2016-0001 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0002 | The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Expl... | | |
CVE-2016-0003 | Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Micro... | | |
CVE-2016-0004 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0005 | Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy vi... | | |
CVE-2016-0006 | The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windo... | E S | |
CVE-2016-0007 | The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windo... | E S | |
CVE-2016-0008 | The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wi... | S | |
CVE-2016-0009 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold ... | | |
CVE-2016-0010 | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel ... | | |
CVE-2016-0011 | Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated u... | | |
CVE-2016-0012 | Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Offic... | | |
CVE-2016-0013 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0014 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8... | S | |
CVE-2016-0015 | DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window... | E S | |
CVE-2016-0016 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8... | E S | |
CVE-2016-0017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0018 | Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 151... | S | |
CVE-2016-0019 | The Remote Desktop Protocol (RDP) service implementation in Microsoft Windows 10 Gold and 1511 allow... | | |
CVE-2016-0020 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle DLL loa... | | |
CVE-2016-0021 | Microsoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary cod... | | |
CVE-2016-0022 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016,... | | |
CVE-2016-0023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0024 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via... | | |
CVE-2016-0025 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 201... | | |
CVE-2016-0026 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and... | | |
CVE-2016-0027 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0028 | Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative... | | |
CVE-2016-0029 | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 20... | S | |
CVE-2016-0030 | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 20... | S | |
CVE-2016-0031 | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 20... | S | |
CVE-2016-0032 | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 20... | S | |
CVE-2016-0033 | Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 does not prevent recursive compi... | | |
CVE-2016-0034 | Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows... | KEV S | |
CVE-2016-0035 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for M... | | |
CVE-2016-0036 | The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Se... | S | |
CVE-2016-0037 | The forms-based authentication implementation in Active Directory Federation Services (ADFS) 3.0 in ... | | |
CVE-2016-0038 | Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W... | S | |
CVE-2016-0039 | Cross-site scripting (XSS) vulnerability in SharePoint Server in Microsoft SharePoint Foundation 201... | | |
CVE-2016-0040 | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 all... | KEV E S | |
CVE-2016-0041 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows... | | |
CVE-2016-0042 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows... | | |
CVE-2016-0043 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0044 | Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote at... | S | |
CVE-2016-0045 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0046 | Windows Reader in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remo... | S | |
CVE-2016-0047 | WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attack... | | |
CVE-2016-0048 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows ... | | |
CVE-2016-0049 | Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows ... | E | |
CVE-2016-0050 | Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and... | | |
CVE-2016-0051 | The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,... | E | |
CVE-2016-0052 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016,... | | |
CVE-2016-0053 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016,... | | |
CVE-2016-0054 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for M... | | |
CVE-2016-0055 | Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted Office doc... | | |
CVE-2016-0056 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016,... | | |
CVE-2016-0057 | Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 does not properly sign an unspecified binary... | | |
CVE-2016-0058 | Buffer overflow in the PDF Library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Wi... | S | |
CVE-2016-0059 | The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to ... | | |
CVE-2016-0060 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitr... | | |
CVE-2016-0061 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitr... | | |
CVE-2016-0062 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o... | | |
CVE-2016-0063 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause ... | E | |
CVE-2016-0064 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial o... | | |
CVE-2016-0065 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0066 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0067 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause ... | | |
CVE-2016-0068 | Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy vi... | | |
CVE-2016-0069 | Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy vi... | | |
CVE-2016-0070 | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window... | | |
CVE-2016-0071 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of... | | |
CVE-2016-0072 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause ... | | |
CVE-2016-0073 | The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10... | E | |
CVE-2016-0074 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0075 | The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10... | E | |
CVE-2016-0076 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0077 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows re... | | |
CVE-2016-0078 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0079 | The kernel in Microsoft Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a ... | E | |
CVE-2016-0080 | Microsoft Edge mishandles exceptions during window-message dispatch operations, which allows remote ... | | |
CVE-2016-0081 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0082 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0083 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0084 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memor... | | |
CVE-2016-0085 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0086 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0087 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 do not properly v... | | |
CVE-2016-0088 | Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS us... | | |
CVE-2016-0089 | Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS us... | | |
CVE-2016-0090 | Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 allows guest OS users to ob... | | |
CVE-2016-0091 | OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, ... | | |
CVE-2016-0092 | OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, ... | | |
CVE-2016-0093 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7... | E | |
CVE-2016-0094 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7... | E | |
CVE-2016-0095 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7... | | |
CVE-2016-0096 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7... | | |
CVE-2016-0097 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0098 | Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W... | | |
CVE-2016-0099 | The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wind... | KEV E S | |
CVE-2016-0100 | Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users ... | | |
CVE-2016-0101 | Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W... | | |
CVE-2016-0102 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o... | | |
CVE-2016-0103 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o... | | |
CVE-2016-0104 | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial o... | | |
CVE-2016-0105 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitr... | | |
CVE-2016-0106 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o... | | |
CVE-2016-0107 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause ... | | |
CVE-2016-0108 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o... | E | |
CVE-2016-0109 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o... | | |
CVE-2016-0110 | Microsoft Internet Explorer 10 through 11 and Microsoft Edge allow remote attackers to execute arbit... | | |
CVE-2016-0111 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitr... | E | |
CVE-2016-0112 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause ... | | |
CVE-2016-0113 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause ... | | |
CVE-2016-0114 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o... | | |
CVE-2016-0115 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0116 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memor... | | |
CVE-2016-0117 | The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windo... | | |
CVE-2016-0118 | The PDF library in Microsoft Windows 10 Gold and 1511 allows remote attackers to execute arbitrary c... | | |
CVE-2016-0119 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0120 | The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, W... | E | |
CVE-2016-0121 | The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, W... | E | |
CVE-2016-0122 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 f... | E | |
CVE-2016-0123 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memor... | | |
CVE-2016-0124 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memor... | | |
CVE-2016-0125 | Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive brow... | | |
CVE-2016-0126 | Microsoft Office 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code v... | | |
CVE-2016-0127 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Com... | | |
CVE-2016-0128 | The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 an... | S | |
CVE-2016-0129 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memor... | | |
CVE-2016-0130 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memor... | | |
CVE-2016-0131 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0132 | Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature va... | | |
CVE-2016-0133 | The USB Mass Storage Class driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1... | | |
CVE-2016-0134 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016,... | | |
CVE-2016-0135 | The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privile... | | |
CVE-2016-0136 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoin... | | |
CVE-2016-0137 | The Click-to-Run (C2R) implementation in Microsoft Office 2013 SP1 and 2016 allows local users to by... | | |
CVE-2016-0138 | Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative U... | | |
CVE-2016-0139 | Microsoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer allow remote attackers to execute arbi... | | |
CVE-2016-0140 | Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, ... | | |
CVE-2016-0141 | The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certific... | | |
CVE-2016-0142 | Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Window... | | |
CVE-2016-0143 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7... | E | |
CVE-2016-0144 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0145 | The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; ... | E | |
CVE-2016-0146 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0147 | Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web ... | | |
CVE-2016-0148 | Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain ... | | |
CVE-2016-0149 | Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows man-in-the-middl... | | |
CVE-2016-0150 | HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service ... | | |
CVE-2016-0151 | The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and ... | KEV E S | |
CVE-2016-0152 | Internet Information Services (IIS) in Microsoft Windows Vista SP2 and Server 2008 SP2 mishandles li... | | |
CVE-2016-0153 | OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, ... | | |
CVE-2016-0154 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitr... | | |
CVE-2016-0155 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memor... | | |
CVE-2016-0156 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memor... | | |
CVE-2016-0157 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memor... | | |
CVE-2016-0158 | Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka... | | |
CVE-2016-0159 | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of... | | |
CVE-2016-0160 | Microsoft Internet Explorer 11 mishandles DLL loading, which allows local users to gain privileges v... | | |
CVE-2016-0161 | Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka... | | |
CVE-2016-0162 | Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files... | KEV S | |
CVE-2016-0163 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0164 | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a d... | | |
CVE-2016-0165 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7... | KEV E S | |
CVE-2016-0166 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o... | | |
CVE-2016-0167 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7... | KEV S | |
CVE-2016-0168 | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, ... | | |
CVE-2016-0169 | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, ... | | |
CVE-2016-0170 | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, ... | | |
CVE-2016-0171 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows ... | E | |
CVE-2016-0172 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0173 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows ... | E | |
CVE-2016-0174 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows ... | | |
CVE-2016-0175 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows ... | | |
CVE-2016-0176 | dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows... | | |
CVE-2016-0177 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0178 | The RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1... | | |
CVE-2016-0179 | Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold ... | | |
CVE-2016-0180 | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window... | | |
CVE-2016-0181 | Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode Hypervisor C... | | |
CVE-2016-0182 | Windows Journal in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Wind... | | |
CVE-2016-0183 | The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on Sh... | | |
CVE-2016-0184 | Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 S... | | |
CVE-2016-0185 | Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers ... | KEV E S | |
CVE-2016-0186 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or ... | | |
CVE-2016-0187 | The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 1... | | |
CVE-2016-0188 | The User Mode Code Integrity (UMCI) implementation in Device Guard in Microsoft Internet Explorer 11... | | |
CVE-2016-0189 | The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 t... | KEV E S | |
CVE-2016-0190 | Volume Manager Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 ... | | |
CVE-2016-0191 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or ... | | |
CVE-2016-0192 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitr... | | |
CVE-2016-0193 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or ... | | |
CVE-2016-0194 | Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain ... | | |
CVE-2016-0195 | The Imaging Component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 ... | | |
CVE-2016-0196 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows ... | | |
CVE-2016-0197 | dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows... | | |
CVE-2016-0198 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016,... | | |
CVE-2016-0199 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause ... | E | |
CVE-2016-0200 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause ... | | |
CVE-2016-0201 | GSKit in IBM Security Network Protection 5.3.1 before 5.3.1.7 and 5.3.2 allows remote attackers to d... | S | |
CVE-2016-0202 | A vulnerability has been identified in tasks, backend object generated for handling any action perfo... | S | |
CVE-2016-0203 | A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow... | S | |
CVE-2016-0204 | Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authentic... | S | |
CVE-2016-0205 | A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that co... | S | |
CVE-2016-0206 | IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down f... | S | |
CVE-2016-0207 | IBM Algorithmics One-Algo Risk Application (ARA) 4.9.1 through 5.1.0 allows remote authenticated use... | S | |
CVE-2016-0208 | IBM WebSphere Commerce 6.x through 6.0.0.11, 7.x through 7.0.0.9, and 8.x before 8.0.0.3 allows remo... | | |
CVE-2016-0209 | Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote att... | | |
CVE-2016-0210 | IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive infor... | S | |
CVE-2016-0211 | IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows al... | | |
CVE-2016-0212 | Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 al... | | |
CVE-2016-0213 | Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 al... | | |
CVE-2016-0214 | IBM Tivoli Endpoint Manager could allow a remote attacker to upload arbitrary files. A remote attack... | S | |
CVE-2016-0215 | IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remot... | S | |
CVE-2016-0216 | Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 al... | | |
CVE-2016-0217 | IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to stored cross-site script... | S | |
CVE-2016-0218 | IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to cross-site scripting, ca... | S | |
CVE-2016-0219 | XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interi... | | |
CVE-2016-0221 | Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intellige... | | |
CVE-2016-0222 | IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass i... | | |
CVE-2016-0223 | Cross-site scripting (XSS) vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0... | S | |
CVE-2016-0224 | SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows re... | | |
CVE-2016-0225 | IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.9 allows remote authenticated Comm... | | |
CVE-2016-0226 | The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly rest... | S | |
CVE-2016-0227 | Cross-site scripting (XSS) vulnerability in the document-list control implementation in IBM Business... | | |
CVE-2016-0228 | IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an ... | S | |
CVE-2016-0229 | Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allo... | | |
CVE-2016-0230 | IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 throug... | S | |
CVE-2016-0231 | IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Servi... | | |
CVE-2016-0232 | IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Servi... | | |
CVE-2016-0233 | SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows re... | | |
CVE-2016-0234 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive informatio... | S | |
CVE-2016-0235 | IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by ... | | |
CVE-2016-0236 | IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10... | S | |
CVE-2016-0237 | IBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive informatio... | | |
CVE-2016-0238 | IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the que... | | |
CVE-2016-0239 | IBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0.1 ... | S | |
CVE-2016-0240 | IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10... | S | |
CVE-2016-0241 | IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10... | S | |
CVE-2016-0242 | IBM Security Guardium 10.x through 10.1 before p100 allows remote authenticated users to obtain sens... | S | |
CVE-2016-0243 | Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5... | | |
CVE-2016-0244 | Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5... | | |
CVE-2016-0245 | The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allow... | S | |
CVE-2016-0246 | Cross-site scripting (XSS) vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 b... | S | |
CVE-2016-0247 | IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p10... | S | |
CVE-2016-0248 | IBM Security Guardium 9.0 before p700 and 10.0 before p100 allows man-in-the-middle attackers to obt... | S | |
CVE-2016-0249 | SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x ... | S | |
CVE-2016-0250 | XML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3 before... | S | |
CVE-2016-0252 | IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09... | | |
CVE-2016-0253 | Cross-site scripting (XSS) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services... | S | |
CVE-2016-0254 | IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XM... | S | |
CVE-2016-0255 | IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by improper... | S | |
CVE-2016-0259 | runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass an intended +dsp authori... | | |
CVE-2016-0260 | Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers t... | | |
CVE-2016-0261 | Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0.0 before SP2 EP2... | S | |
CVE-2016-0262 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1.1 through 7.1.1.3, 7.5.0... | | |
CVE-2016-0263 | IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 be... | | |
CVE-2016-0264 | Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 ... | | |
CVE-2016-0265 | IBM Campaign is vulnerable to cross-site scripting, caused by improper validation of user-supplied i... | S | |
CVE-2016-0266 | IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which makes ... | M | |
CVE-2016-0267 | IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows re... | | |
CVE-2016-0268 | XML external entity (XXE) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services ... | S | |
CVE-2016-0269 | Cross-site scripting (XSS) vulnerability in IBM BigFix Platform 9.x before 9.1.8 and 9.2.x before 9.... | | |
CVE-2016-0270 | IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and... | S | |
CVE-2016-0271 | The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1... | | |
CVE-2016-0272 | Cross-site request forgery (CSRF) vulnerability in IBM Financial Transaction Manager (FTM) for ACH S... | S | |
CVE-2016-0273 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 ... | | |
CVE-2016-0274 | IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x befo... | S | |
CVE-2016-0275 | IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x befo... | S | |
CVE-2016-0276 | IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x befo... | S | |
CVE-2016-0277 | Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9... | | |
CVE-2016-0278 | Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9... | | |
CVE-2016-0279 | Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9... | | |
CVE-2016-0280 | Cross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information Server... | S | |
CVE-2016-0281 | The mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames feature ... | | |
CVE-2016-0282 | Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authentica... | | |
CVE-2016-0283 | Cross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in IBM ... | | |
CVE-2016-0284 | The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4... | | |
CVE-2016-0285 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 ... | | |
CVE-2016-0286 | IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM... | S | |
CVE-2016-0287 | IBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified vector... | | |
CVE-2016-0288 | IBM Security AppScan Standard 8.7.x, 8.8.x, and 9.x before 9.0.3.2 and Security AppScan Enterprise a... | | |
CVE-2016-0289 | shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 an... | | |
CVE-2016-0291 | IBM BigFix Platform 9.0, 9.1 before 9.1.8, and 9.2 before 9.2.8 allow remote authenticated users to ... | | |
CVE-2016-0292 | WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows local u... | M | |
CVE-2016-0293 | Cross-site scripting (XSS) vulnerability in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9... | | |
CVE-2016-0295 | Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 be... | M | |
CVE-2016-0296 | IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive informatio... | S | |
CVE-2016-0297 | IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) could allow a remote attacker to obtain... | | |
CVE-2016-0298 | Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p... | | |
CVE-2016-0299 | IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allo... | | |
CVE-2016-0300 | IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 migh... | | |
CVE-2016-0301 | Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9... | | |
CVE-2016-0303 | Cross-site scripting (XSS) vulnerability in IBM Tivoli Integrated Portal 2.2.0.0 through 2.2.0.15 al... | | |
CVE-2016-0304 | The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain ... | | |
CVE-2016-0305 | IBM Connections is vulnerable to cross-site scripting, caused by improper validation of user-supplie... | S | |
CVE-2016-0306 | IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.41, 8.0 before 8.0.0.13, and 8.5 before 8.5.... | | |
CVE-2016-0307 | IBM Connections 5.5 and earlier allows remote attackers to obtain sensitive information by reading s... | S | |
CVE-2016-0308 | IBM Connections 5.5 and earlier is vulnerable to possible link manipulation attack that could result... | S | |
CVE-2016-0310 | IBM Connections 5.5 and earlier is vulnerable to possible host header injection attack that could ca... | S | |
CVE-2016-0311 | Cross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-T... | | |
CVE-2016-0312 | IBM TRIRIGA Application Platform before 3.3.2 allows remote attackers to obtain sensitive informatio... | | |
CVE-2016-0313 | Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) i... | | |
CVE-2016-0314 | The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x befor... | | |
CVE-2016-0315 | The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x befor... | | |
CVE-2016-0316 | Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Servi... | S | |
CVE-2016-0317 | Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows... | S | |
CVE-2016-0318 | Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does n... | S | |
CVE-2016-0319 | The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.... | S | |
CVE-2016-0320 | IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST en... | S | |
CVE-2016-0321 | IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly... | | |
CVE-2016-0322 | Cross-site scripting (XSS) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 th... | | |
CVE-2016-0323 | The Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20160321-1358 allows remote aut... | | |
CVE-2016-0324 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-... | S | |
CVE-2016-0325 | IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 b... | | |
CVE-2016-0326 | IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iF... | S | |
CVE-2016-0327 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-... | S | |
CVE-2016-0328 | IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10... | S | |
CVE-2016-0329 | Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1_iFix3, 10.0.1.x before... | S | |
CVE-2016-0330 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-... | | |
CVE-2016-0331 | Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 i... | S | |
CVE-2016-0332 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-... | S | |
CVE-2016-0335 | Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appl... | S | |
CVE-2016-0336 | Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7... | S | |
CVE-2016-0338 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-... | | |
CVE-2016-0339 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-... | | |
CVE-2016-0340 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-... | | |
CVE-2016-0341 | IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2... | | |
CVE-2016-0342 | IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allo... | | |
CVE-2016-0343 | IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allo... | | |
CVE-2016-0344 | Cross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application Plat... | | |
CVE-2016-0345 | IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allo... | | |
CVE-2016-0346 | Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.... | | |
CVE-2016-0348 | Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.... | | |
CVE-2016-0349 | IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote aut... | | |
CVE-2016-0350 | Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) i... | | |
CVE-2016-0351 | IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 does not set the... | S | |
CVE-2016-0353 | IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does ... | | |
CVE-2016-0354 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user to upload a m... | S | |
CVE-2016-0355 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been... | S | |
CVE-2016-0356 | IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been... | S | |
CVE-2016-0357 | IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-... | | |
CVE-2016-0358 | IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID... | S | |
CVE-2016-0359 | CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 befo... | | |
CVE-2016-0360 | IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects ... | | |
CVE-2016-0361 | IBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix 9, ... | S | |
CVE-2016-0362 | IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allo... | | |
CVE-2016-0363 | The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (... | | |
CVE-2016-0364 | IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 does not ... | | |
CVE-2016-0365 | IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when age... | | |
CVE-2016-0366 | IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 might allow remo... | S | |
CVE-2016-0367 | IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 allows remote au... | S | |
CVE-2016-0369 | XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows r... | S | |
CVE-2016-0370 | Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.... | S | |
CVE-2016-0371 | The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace outpu... | S | |
CVE-2016-0372 | IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 b... | | |
CVE-2016-0373 | IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive informa... | S | |
CVE-2016-0374 | The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.... | | |
CVE-2016-0375 | JMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x through 1.2.0.3, and 2.0.x through 2.0.0... | | |
CVE-2016-0376 | The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP... | | |
CVE-2016-0377 | The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x befo... | S | |
CVE-2016-0378 | IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3, when the installation lacks a defaul... | | |
CVE-2016-0379 | IBM WebSphere MQ 7.5 before 7.5.0.7 and 8.0 before 8.0.0.5 mishandles protocol flows, which allows r... | S | |
CVE-2016-0380 | IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4 iFix003 u... | S | |
CVE-2016-0381 | IBM Cognos TM1 10.2.2 before FP5, when the host/pmhub/pm/admin AdminGroups setting is empty, allows ... | S | |
CVE-2016-0382 | The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state i... | S | |
CVE-2016-0385 | Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, ... | S | |
CVE-2016-0386 | Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2... | | |
CVE-2016-0387 | Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4... | S | |
CVE-2016-0389 | Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Libert... | | |
CVE-2016-0390 | Cross-site scripting (XSS) vulnerability in IBM Algorithmics Algo One Algo Risk Application (ARA) 4.... | | |
CVE-2016-0391 | The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers... | | |
CVE-2016-0392 | IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Stora... | | |
CVE-2016-0393 | IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP0... | | |
CVE-2016-0394 | IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could... | S | |
CVE-2016-0396 | IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that w... | S | |
CVE-2016-0397 | WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows remote ... | M | |
CVE-2016-0398 | IBM Cognos Analytics (CA) 11.0 before 11.0.2 allows remote attackers to conduct content-spoofing att... | S | |
CVE-2016-0399 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 be... | | |
CVE-2016-0400 | CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1... | E S | |
CVE-2016-0401 | Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.... | | |
CVE-2016-0402 | Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u... | S | |
CVE-2016-0403 | Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability vi... | | |
CVE-2016-0404 | Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11... | | |
CVE-2016-0405 | Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 ... | | |
CVE-2016-0406 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availa... | | |
CVE-2016-0407 | Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9... | S | |
CVE-2016-0408 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | S | |
CVE-2016-0409 | Unspecified vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland component in O... | S | |
CVE-2016-0410 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0411 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man... | | |
CVE-2016-0412 | Unspecified vulnerability in the PeopleSoft Enterprise SCM eProcurement component in Oracle PeopleSo... | S | |
CVE-2016-0413 | Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11... | | |
CVE-2016-0414 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, int... | | |
CVE-2016-0415 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man... | | |
CVE-2016-0416 | Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect integrity via u... | | |
CVE-2016-0417 | Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 ... | | |
CVE-2016-0418 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, int... | | |
CVE-2016-0419 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk... | | |
CVE-2016-0420 | Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Produ... | | |
CVE-2016-0421 | Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Produ... | | |
CVE-2016-0422 | Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Produ... | | |
CVE-2016-0423 | Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Produ... | | |
CVE-2016-0424 | Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Produ... | | |
CVE-2016-0425 | Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Produ... | | |
CVE-2016-0426 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality and ... | | |
CVE-2016-0427 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man... | | |
CVE-2016-0428 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk... | | |
CVE-2016-0429 | Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.... | | |
CVE-2016-0430 | Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1... | | |
CVE-2016-0431 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk... | | |
CVE-2016-0432 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware ... | | |
CVE-2016-0433 | Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.9.0 allows r... | | |
CVE-2016-0434 | Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applicati... | S | |
CVE-2016-0435 | Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applicati... | S | |
CVE-2016-0436 | Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applicati... | S | |
CVE-2016-0437 | Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applicati... | S | |
CVE-2016-0438 | Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applicati... | | |
CVE-2016-0439 | Unspecified vulnerability in the Web Cache component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1... | | |
CVE-2016-0440 | Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability vi... | | |
CVE-2016-0441 | Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2... | | |
CVE-2016-0442 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man... | | |
CVE-2016-0443 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man... | | |
CVE-2016-0444 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man... | | |
CVE-2016-0445 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man... | | |
CVE-2016-0446 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man... | | |
CVE-2016-0447 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man... | | |
CVE-2016-0448 | Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u... | | |
CVE-2016-0449 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man... | | |
CVE-2016-0450 | Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 al... | E | |
CVE-2016-0451 | Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 al... | E | |
CVE-2016-0452 | Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 al... | | |
CVE-2016-0453 | Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.1.2... | | |
CVE-2016-0454 | Unspecified vulnerability in the Oracle Mobile Application Servlet component in Oracle E-Business Su... | | |
CVE-2016-0455 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man... | | |
CVE-2016-0456 | Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Bu... | | |
CVE-2016-0457 | Unspecified vulnerability in the Application Mgmt Pack for E-Business Suite component in Oracle E-Bu... | | |
CVE-2016-0458 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vec... | | |
CVE-2016-0459 | Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite ... | | |
CVE-2016-0460 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | | |
CVE-2016-0461 | Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.4, 12... | | |
CVE-2016-0462 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | S | |
CVE-2016-0463 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | | |
CVE-2016-0464 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6... | | |
CVE-2016-0465 | Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 ... | | |
CVE-2016-0466 | Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE... | | |
CVE-2016-0467 | Unspecified vulnerability in the Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, an... | | |
CVE-2016-0468 | Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle... | S | |
CVE-2016-0469 | Unspecified vulnerability in the Oracle Retail MICROS C2 component in Oracle Retail Applications 9.8... | S | |
CVE-2016-0470 | Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.... | | |
CVE-2016-0471 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | | |
CVE-2016-0472 | Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.4, 12... | | |
CVE-2016-0473 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | | |
CVE-2016-0474 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | | |
CVE-2016-0475 | Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE... | | |
CVE-2016-0476 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0477 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0478 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0479 | Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle... | S | |
CVE-2016-0480 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0481 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0482 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0483 | Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRocki... | S | |
CVE-2016-0484 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0485 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0486 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0487 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0488 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0489 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0490 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | S | |
CVE-2016-0491 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | E S | |
CVE-2016-0492 | Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man... | E | |
CVE-2016-0493 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availa... | | |
CVE-2016-0494 | Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u... | | |
CVE-2016-0495 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox ... | | |
CVE-2016-0496 | Unspecified vulnerability in the MICROS CWDirect component in Oracle Retail Applications 12.5, 13.0,... | | |
CVE-2016-0497 | Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply... | | |
CVE-2016-0498 | Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply... | | |
CVE-2016-0499 | Unspecified vulnerability in the Java VM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and... | S | |
CVE-2016-0500 | Unspecified vulnerability in the Oracle Retail Order Broker Cloud Service component in Oracle Retail... | | |
CVE-2016-0501 | Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.2... | | |
CVE-2016-0502 | Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote au... | | |
CVE-2016-0503 | Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated u... | | |
CVE-2016-0504 | Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated u... | | |
CVE-2016-0505 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and Mari... | S | |
CVE-2016-0506 | Unspecified vulnerability in the Oracle Retail Order Management System Cloud Service component in Or... | | |
CVE-2016-0507 | Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 ... | | |
CVE-2016-0508 | Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows r... | | |
CVE-2016-0509 | Unspecified vulnerability in the Oracle Internet Expenses component in Oracle E-Business Suite 11.5.... | | |
CVE-2016-0510 | Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite... | | |
CVE-2016-0511 | Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite... | | |
CVE-2016-0512 | Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10... | | |
CVE-2016-0513 | Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suit... | | |
CVE-2016-0514 | Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suit... | | |
CVE-2016-0515 | Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suit... | | |
CVE-2016-0516 | Unspecified vulnerability in the Oracle Quality component in Oracle E-Business Suite 11.5.10.2 allow... | | |
CVE-2016-0517 | Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10... | | |
CVE-2016-0518 | Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10... | | |
CVE-2016-0519 | Unspecified vulnerability in the Oracle iReceivables component in Oracle E-Business Suite 11.5.10.2 ... | | |
CVE-2016-0520 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su... | | |
CVE-2016-0521 | Unspecified vulnerability in the Oracle iProcurement component in Oracle E-Business Suite 11.5.10.2 ... | | |
CVE-2016-0522 | Unspecified vulnerability in the Oracle Retail Open Commerce Platform Cloud Service component in Ora... | | |
CVE-2016-0523 | Unspecified vulnerability in the Oracle Interaction Blending component in Oracle E-Business Suite 11... | | |
CVE-2016-0524 | Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11... | | |
CVE-2016-0525 | Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11... | | |
CVE-2016-0526 | Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suit... | | |
CVE-2016-0527 | Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business ... | | |
CVE-2016-0528 | Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business ... | | |
CVE-2016-0529 | Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business ... | | |
CVE-2016-0530 | Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business ... | | |
CVE-2016-0531 | Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 12... | | |
CVE-2016-0532 | Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suit... | | |
CVE-2016-0533 | Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suit... | | |
CVE-2016-0534 | Unspecified vulnerability in the Oracle Project Contracts component in Oracle E-Business Suite 12.1.... | | |
CVE-2016-0535 | Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availabi... | | |
CVE-2016-0536 | Unspecified vulnerability in the Oracle Universal Work Queue component in Oracle E-Business Suite 11... | | |
CVE-2016-0537 | Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10... | | |
CVE-2016-0538 | Unspecified vulnerability in the Oracle Financial Consolidation Hub component in Oracle E-Business S... | | |
CVE-2016-0539 | Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.... | | |
CVE-2016-0540 | Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite... | | |
CVE-2016-0541 | Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite... | | |
CVE-2016-0542 | Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.1, 1... | | |
CVE-2016-0543 | Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2 all... | | |
CVE-2016-0544 | Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2 all... | | |
CVE-2016-0545 | Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 1... | | |
CVE-2016-0546 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and Mari... | S | |
CVE-2016-0547 | Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite... | | |
CVE-2016-0548 | Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite... | | |
CVE-2016-0549 | Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite... | | |
CVE-2016-0550 | Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suit... | | |
CVE-2016-0551 | Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 1... | | |
CVE-2016-0552 | Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 1... | | |
CVE-2016-0553 | Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite... | | |
CVE-2016-0554 | Unspecified vulnerability in the Oracle Interaction Center Intelligence component in Oracle E-Busine... | | |
CVE-2016-0555 | Unspecified vulnerability in the Oracle CADView-3D component in Oracle E-Business Suite 11.5.10.2, 1... | | |
CVE-2016-0556 | Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 11... | | |
CVE-2016-0557 | Unspecified vulnerability in the Oracle Advanced Collections component in Oracle E-Business Suite 11... | | |
CVE-2016-0558 | Unspecified vulnerability in the Oracle Service Contracts component in Oracle E-Business Suite 11.5.... | | |
CVE-2016-0559 | Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 1... | | |
CVE-2016-0560 | Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 1... | | |
CVE-2016-0561 | Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite... | | |
CVE-2016-0562 | Unspecified vulnerability in the Oracle Common Applications component in Oracle E-Business Suite 11.... | | |
CVE-2016-0563 | Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suit... | | |
CVE-2016-0564 | Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite... | | |
CVE-2016-0565 | Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12... | | |
CVE-2016-0566 | Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12... | | |
CVE-2016-0567 | Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite... | | |
CVE-2016-0568 | Unspecified vulnerability in the Oracle Email Center component in Oracle E-Business Suite 12.1.1, 12... | | |
CVE-2016-0569 | Unspecified vulnerability in the Oracle E-Business Intelligence component in Oracle E-Business Suite... | | |
CVE-2016-0570 | Unspecified vulnerability in the Oracle HCM Configuration Workbench component in Oracle E-Business S... | | |
CVE-2016-0571 | Unspecified vulnerability in the Oracle Balanced Scorecard component in Oracle E-Business Suite 11.5... | | |
CVE-2016-0572 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6... | | |
CVE-2016-0573 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6... | | |
CVE-2016-0574 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6... | | |
CVE-2016-0575 | Unspecified vulnerability in the Oracle Learning Management component in Oracle E-Business Suite 11.... | | |
CVE-2016-0576 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su... | | |
CVE-2016-0577 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6... | | |
CVE-2016-0578 | Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Sui... | | |
CVE-2016-0579 | Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Sui... | | |
CVE-2016-0580 | Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.... | | |
CVE-2016-0581 | Unspecified vulnerability in the Oracle Approvals Management component in Oracle E-Business Suite 11... | | |
CVE-2016-0582 | Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Sui... | | |
CVE-2016-0583 | Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Sui... | | |
CVE-2016-0584 | Unspecified vulnerability in the Oracle CRM Technology Foundation component in Oracle E-Business Sui... | | |
CVE-2016-0585 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su... | | |
CVE-2016-0586 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su... | | |
CVE-2016-0587 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | | |
CVE-2016-0588 | Unspecified vulnerability in the Oracle General Ledger component in Oracle E-Business Suite 11.5.10.... | | |
CVE-2016-0589 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su... | | |
CVE-2016-0590 | Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle Peop... | | |
CVE-2016-0591 | Unspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle PeopleSoft... | S | |
CVE-2016-0592 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox ... | S | |
CVE-2016-0593 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0594 | Unspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to af... | | |
CVE-2016-0595 | Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to af... | | |
CVE-2016-0596 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB befo... | S | |
CVE-2016-0597 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and Mari... | S | |
CVE-2016-0598 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and Mari... | S | |
CVE-2016-0599 | Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availabi... | | |
CVE-2016-0600 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and Mari... | S | |
CVE-2016-0601 | Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availabi... | | |
CVE-2016-0602 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox ... | S | |
CVE-2016-0603 | Unspecified vulnerability in the Java SE component in Oracle Java SE 6u111, 7u95, 8u71, and 8u72, wh... | | |
CVE-2016-0604 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0605 | Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to af... | | |
CVE-2016-0606 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and Mari... | S | |
CVE-2016-0607 | Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated u... | | |
CVE-2016-0608 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and Mari... | S | |
CVE-2016-0609 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and Mari... | S | |
CVE-2016-0610 | Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x b... | S | |
CVE-2016-0611 | Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated u... | S | |
CVE-2016-0612 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0613 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0614 | Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1.7.... | | |
CVE-2016-0615 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0616 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x befor... | S | |
CVE-2016-0617 | Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect... | S | |
CVE-2016-0618 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via ... | | |
CVE-2016-0619 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0620 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0621 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0622 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0623 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via... | S | |
CVE-2016-0624 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0625 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0626 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0627 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0628 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0629 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0630 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0631 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0632 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0633 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0634 | The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute ... | S | |
CVE-2016-0635 | Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manage... | S | |
CVE-2016-0636 | Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect c... | | |
CVE-2016-0637 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0638 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6... | S | |
CVE-2016-0639 | Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote at... | S | |
CVE-2016-0640 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and ear... | S | |
CVE-2016-0641 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and ear... | S | |
CVE-2016-0642 | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and ear... | S | |
CVE-2016-0643 | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and ear... | S | |
CVE-2016-0644 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and ear... | S | |
CVE-2016-0645 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0646 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and ear... | S | |
CVE-2016-0647 | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and ear... | S | |
CVE-2016-0648 | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and ear... | S | |
CVE-2016-0649 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and ear... | S | |
CVE-2016-0650 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and ear... | S | |
CVE-2016-0651 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availabili... | S | |
CVE-2016-0652 | Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availabili... | | |
CVE-2016-0653 | Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availabili... | S | |
CVE-2016-0654 | Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availabili... | S | |
CVE-2016-0655 | Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0... | S | |
CVE-2016-0656 | Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availabili... | S | |
CVE-2016-0657 | Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidenti... | S | |
CVE-2016-0658 | Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availabili... | S | |
CVE-2016-0659 | Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availabili... | S | |
CVE-2016-0660 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0661 | Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local use... | S | |
CVE-2016-0662 | Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availabili... | S | |
CVE-2016-0663 | Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availabili... | S | |
CVE-2016-0664 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0665 | Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local use... | S | |
CVE-2016-0666 | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and ear... | S | |
CVE-2016-0667 | Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availabili... | S | |
CVE-2016-0668 | Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0... | S | |
CVE-2016-0669 | Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and avai... | S | |
CVE-2016-0670 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0671 | Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 12.1.2.0 a... | S | |
CVE-2016-0672 | Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Servic... | | |
CVE-2016-0673 | Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 ... | | |
CVE-2016-0674 | Unspecified vulnerability in the Siebel Core - Common Components component in Oracle Siebel CRM 8.1.... | | |
CVE-2016-0675 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6... | | |
CVE-2016-0676 | Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vec... | | |
CVE-2016-0677 | Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.1 and 12.... | | |
CVE-2016-0678 | Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox ... | | |
CVE-2016-0679 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | | |
CVE-2016-0680 | Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9... | | |
CVE-2016-0681 | Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 11.2.0.4, 12.1.0.1,... | | |
CVE-2016-0682 | Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29,... | S | |
CVE-2016-0683 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | | |
CVE-2016-0684 | Unspecified vulnerability in the Oracle Retail MICROS ARS POS component in Oracle Retail Application... | | |
CVE-2016-0685 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | | |
CVE-2016-0686 | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows r... | | |
CVE-2016-0687 | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows r... | | |
CVE-2016-0688 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6... | | |
CVE-2016-0689 | Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29,... | S | |
CVE-2016-0690 | Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0... | | |
CVE-2016-0691 | Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0... | | |
CVE-2016-0692 | Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29,... | S | |
CVE-2016-0693 | Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confid... | | |
CVE-2016-0694 | Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29,... | S | |
CVE-2016-0695 | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRocki... | | |
CVE-2016-0696 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6... | | |
CVE-2016-0697 | Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Su... | | |
CVE-2016-0698 | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Pr... | | |
CVE-2016-0699 | Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Servic... | | |
CVE-2016-0700 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6... | | |
CVE-2016-0701 | The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure... | | |
CVE-2016-0702 | The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and... | S | |
CVE-2016-0703 | The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8z... | | |
CVE-2016-0704 | An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 imple... | | |
CVE-2016-0705 | Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1... | S | |
CVE-2016-0706 | Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does ... | | |
CVE-2016-0707 | The agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent/data... | | |
CVE-2016-0708 | Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote di... | M | |
CVE-2016-0709 | Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache... | E | |
CVE-2016-0710 | Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 a... | E | |
CVE-2016-0711 | Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote att... | E | |
CVE-2016-0712 | Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to ... | E | |
CVE-2016-0713 | Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct... | | |
CVE-2016-0714 | The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x be... | | |
CVE-2016-0715 | Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 th... | | |
CVE-2016-0716 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0729. Reason: This candidate... | R | |
CVE-2016-0717 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0729. Reason: This candidate... | R | |
CVE-2016-0718 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute ar... | S | |
CVE-2016-0719 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0718. Reason: This candida... | R | |
CVE-2016-0720 | Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149.... | S | |
CVE-2016-0721 | Session fixation vulnerability in pcsd in pcs before 0.9.157.... | S | |
CVE-2016-0722 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was wi... | R | |
CVE-2016-0723 | Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 a... | | |
CVE-2016-0724 | The (1) core_enrol_get_course_enrolment_methods and (2) enrol_self_get_instance_info web services in... | | |
CVE-2016-0725 | Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/managem... | | |
CVE-2016-0726 | The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administr... | | |
CVE-2016-0727 | The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before... | E S | |
CVE-2016-0728 | The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 m... | E | |
CVE-2016-0729 | Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cp... | | |
CVE-2016-0730 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual... | R | |
CVE-2016-0731 | The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to re... | | |
CVE-2016-0732 | The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0... | M | |
CVE-2016-0733 | The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lac... | | |
CVE-2016-0734 | The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-O... | | |
CVE-2016-0735 | Apache Ranger 0.5.x before 0.5.2 allows remote authenticated users to bypass intended parent resourc... | | |
CVE-2016-0736 | In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie us... | E | |
CVE-2016-0737 | OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allo... | S | |
CVE-2016-0738 | OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not... | S | |
CVE-2016-0739 | libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-grou... | | |
CVE-2016-0740 | Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1... | S | |
CVE-2016-0741 | slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7... | S | |
CVE-2016-0742 | The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial... | S | |
CVE-2016-0743 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was with... | R | |
CVE-2016-0744 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was with... | R | |
CVE-2016-0745 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was with... | R | |
CVE-2016-0746 | Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 a... | S | |
CVE-2016-0747 | The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution,... | S | |
CVE-2016-0749 | The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM pr... | | |
CVE-2016-0750 | The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message... | S | |
CVE-2016-0751 | actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.... | | |
CVE-2016-0752 | Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x b... | KEV E | |
CVE-2016-0753 | Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta... | | |
CVE-2016-0754 | cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working di... | | |
CVE-2016-0755 | The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-au... | | |
CVE-2016-0756 | The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly... | S | |
CVE-2016-0757 | OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when sho... | S | |
CVE-2016-0758 | Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain pri... | | |
CVE-2016-0759 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4003. Reason: This candida... | R | |
CVE-2016-0760 | Multiple incomplete blacklist vulnerabilities in Apache Sentry before 1.7.0 allow remote authenticat... | | |
CVE-2016-0761 | Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6... | | |
CVE-2016-0762 | The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 ... | S | |
CVE-2016-0763 | The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7... | | |
CVE-2016-0764 | Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, R... | | |
CVE-2016-0765 | Multiple cross-site scripting (XSS) vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 f... | E | |
CVE-2016-0766 | PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x be... | | |
CVE-2016-0767 | PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the publi... | | |
CVE-2016-0768 | PostgreSQL PL/Java after 9.0 does not honor access controls on large objects.... | | |
CVE-2016-0769 | Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress ... | E | |
CVE-2016-0770 | Cross-site scripting (XSS) vulnerability in includes/admin/pages/manage.php in the Connections Busin... | | |
CVE-2016-0771 | The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.... | | |
CVE-2016-0772 | The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 ... | S | |
CVE-2016-0773 | PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x be... | | |
CVE-2016-0774 | The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport... | | |
CVE-2016-0775 | Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 al... | | |
CVE-2016-0776 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was wi... | R | |
CVE-2016-0777 | The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p... | | |
CVE-2016-0778 | The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.... | E S | |
CVE-2016-0779 | The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote at... | S | |
CVE-2016-0780 | It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versio... | | |
CVE-2016-0781 | The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 t... | | |
CVE-2016-0782 | The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.... | | |
CVE-2016-0783 | The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset... | S | |
CVE-2016-0784 | Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMe... | E S | |
CVE-2016-0785 | Apache Struts 2.x before 2.3.28 allows remote attackers to execute arbitrary code via a "%{}" sequen... | | |
CVE-2016-0786 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a... | R | |
CVE-2016-0787 | The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to ... | S | |
CVE-2016-0788 | The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execut... | S | |
CVE-2016-0789 | CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before... | S | |
CVE-2016-0790 | Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify API token... | S | |
CVE-2016-0791 | Jenkins before 1.650 and LTS before 1.642.2 do not use a constant-time algorithm to verify CSRF toke... | S | |
CVE-2016-0792 | Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authe... | E S | |
CVE-2016-0793 | Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly ... | E | |
CVE-2016-0794 | The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (mem... | | |
CVE-2016-0795 | LibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption) or... | | |
CVE-2016-0796 | WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vu... | E | |
CVE-2016-0797 | Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attac... | S | |
CVE-2016-0798 | Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 bef... | | |
CVE-2016-0799 | The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g i... | | |
CVE-2016-0800 | The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, req... | | |
CVE-2016-0801 | The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.... | E | |
CVE-2016-0802 | The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.... | | |
CVE-2016-0803 | libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2... | | |
CVE-2016-0804 | The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplay... | | |
CVE-2016-0805 | The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.... | | |
CVE-2016-0806 | The Qualcomm Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.... | | |
CVE-2016-0807 | The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows atta... | | |
CVE-2016-0808 | Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in A... | | |
CVE-2016-0809 | Use-after-free vulnerability in the wifi_cleanup function in bcmdhd/wifi_hal/wifi_hal.cpp in Wi-Fi i... | | |
CVE-2016-0810 | media/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, an... | | |
CVE-2016-0811 | Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplaye... | | |
CVE-2016-0812 | The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindo... | | |
CVE-2016-0813 | packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in... | | |
CVE-2016-0815 | The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in A... | | |
CVE-2016-0816 | mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or ca... | | |
CVE-2016-0818 | The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in And... | | |
CVE-2016-0819 | The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x bef... | | |
CVE-2016-0820 | The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privile... | | |
CVE-2016-0821 | The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android... | S | |
CVE-2016-0822 | The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain ... | | |
CVE-2016-0823 | The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Androi... | | |
CVE-2016-0824 | libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive inf... | | |
CVE-2016-0825 | The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensi... | | |
CVE-2016-0826 | libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before... | | |
CVE-2016-0827 | Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.... | | |
CVE-2016-0828 | The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserv... | | |
CVE-2016-0829 | The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserv... | | |
CVE-2016-0830 | btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denia... | | |
CVE-2016-0831 | The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in A... | | |
CVE-2016-0832 | Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate at... | | |
CVE-2016-0833 | Android allows users to cause a denial of service.... | | |
CVE-2016-0834 | An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers t... | | |
CVE-2016-0835 | decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to... | | |
CVE-2016-0836 | Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01... | | |
CVE-2016-0837 | MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2,... | | |
CVE-2016-0838 | Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x ... | | |
CVE-2016-0839 | post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effec... | | |
CVE-2016-0840 | Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x... | | |
CVE-2016-0841 | media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5... | | |
CVE-2016-0842 | The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Co... | | |
CVE-2016-0843 | The Qualcomm ARM processor performance-event manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2... | S | |
CVE-2016-0844 | The Qualcomm RF driver in Android 6.x before 2016-04-01 does not properly restrict access to socket ... | S | |
CVE-2016-0845 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0846 | libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.... | E S | |
CVE-2016-0847 | The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 a... | | |
CVE-2016-0848 | Race condition in Download Manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1... | S | |
CVE-2016-0849 | Multiple integer overflows in minzip/SysUtil.c in the Recovery Procedure in Android 5.0.x before 5.0... | S | |
CVE-2016-0850 | The PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.... | | |
CVE-2016-0851 | Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service (out-of-bounds m... | | |
CVE-2016-0852 | Advantech WebAccess before 8.1 allows remote attackers to bypass an intended administrative requirem... | | |
CVE-2016-0853 | Advantech WebAccess before 8.1 allows remote attackers to obtain sensitive information via crafted i... | | |
CVE-2016-0854 | Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction scr... | E | |
CVE-2016-0855 | Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list ... | | |
CVE-2016-0856 | Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to ex... | | |
CVE-2016-0857 | Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to exe... | | |
CVE-2016-0858 | Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code o... | | |
CVE-2016-0859 | Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to ... | | |
CVE-2016-0860 | Buffer overflow in the BwpAlarm subsystem in Advantech WebAccess before 8.1 allows remote attackers ... | | |
CVE-2016-0861 | General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 all... | E | |
CVE-2016-0862 | General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 all... | E | |
CVE-2016-0863 | Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management ... | | |
CVE-2016-0864 | Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Bui... | | |
CVE-2016-0865 | Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Bui... | | |
CVE-2016-0866 | Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System ... | | |
CVE-2016-0867 | CAREL PlantVisorEnhanced allows remote attackers to bypass intended access restrictions via a direct... | | |
CVE-2016-0868 | Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 1... | | |
CVE-2016-0869 | Heap-based buffer overflow in MICROSYS PROMOTIC before 8.3.11 allows remote authenticated users to c... | S | |
CVE-2016-0870 | The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive con... | | |
CVE-2016-0871 | Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration f... | | |
CVE-2016-0872 | A Plaintext Storage of a Password issue was discovered in Kabona AB WebDatorCentral (WDC) versions p... | | |
CVE-2016-0875 | Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and l... | | |
CVE-2016-0876 | Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passw... | | |
CVE-2016-0877 | Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a ... | | |
CVE-2016-0878 | Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of servic... | | |
CVE-2016-0879 | Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log file... | | |
CVE-2016-0880 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0881 | EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to ... | | |
CVE-2016-0882 | EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to ... | | |
CVE-2016-0883 | Pivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-en... | | |
CVE-2016-0884 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0885 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual w... | R | |
CVE-2016-0886 | EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to ... | | |
CVE-2016-0887 | EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Editi... | | |
CVE-2016-0888 | EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote auth... | | |
CVE-2016-0889 | An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remo... | | |
CVE-2016-0890 | EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 S... | M | |
CVE-2016-0891 | Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM b... | E | |
CVE-2016-0892 | Cross-site scripting (XSS) vulnerability in EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows re... | | |
CVE-2016-0893 | EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive... | | |
CVE-2016-0894 | EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended ... | | |
CVE-2016-0895 | EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attac... | | |
CVE-2016-0896 | Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0... | M | |
CVE-2016-0897 | Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere... | | |
CVE-2016-0898 | MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. Thes... | | |
CVE-2016-0899 | EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak... | | |
CVE-2016-0900 | Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows... | | |
CVE-2016-0901 | Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows... | | |
CVE-2016-0902 | CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote atta... | | |
CVE-2016-0903 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 rely ... | | |
CVE-2016-0904 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use t... | | |
CVE-2016-0905 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow... | | |
CVE-2016-0906 | The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar ... | | |
CVE-2016-0907 | EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.... | | |
CVE-2016-0908 | EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root she... | | |
CVE-2016-0909 | EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3 and older contain a vulner... | | |
CVE-2016-0910 | EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session i... | | |
CVE-2016-0911 | EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS export... | | |
CVE-2016-0912 | EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intend... | | |
CVE-2016-0913 | The client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Mic... | | |
CVE-2016-0914 | EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x be... | | |
CVE-2016-0915 | The Self-Service Portal in EMC RSA Authentication Manager (AM) Prime Self-Service 3.0 and 3.1 before... | | |
CVE-2016-0916 | EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, w... | | |
CVE-2016-0917 | The SMB service in EMC VNXe (VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100/3150... | | |
CVE-2016-0918 | EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via L... | | |
CVE-2016-0919 | EMC RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Detec... | | |
CVE-2016-0920 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow... | | |
CVE-2016-0921 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use w... | | |
CVE-2016-0922 | EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which ma... | | |
CVE-2016-0923 | The client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5 plac... | | |
CVE-2016-0924 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-2761. Reason: This candida... | R | |
CVE-2016-0925 | Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Auth... | | |
CVE-2016-0926 | Cross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic Runt... | | |
CVE-2016-0927 | Cross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 al... | | |
CVE-2016-0928 | Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.30 ... | | |
CVE-2016-0929 | The metrics-collection component in RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x before 1.6.4 logs... | | |
CVE-2016-0930 | Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSpher... | | |
CVE-2016-0931 | Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, ... | S | |
CVE-2016-0932 | Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.... | S | |
CVE-2016-0933 | Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, ... | S | |
CVE-2016-0934 | Use-after-free vulnerability in AGM.dll in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acro... | S | |
CVE-2016-0935 | Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC ... | S | |
CVE-2016-0936 | Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, ... | S | |
CVE-2016-0937 | Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.... | S | |
CVE-2016-0938 | The AcroForm plugin in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classi... | S | |
CVE-2016-0939 | Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, ... | S | |
CVE-2016-0940 | Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader ... | S | |
CVE-2016-0941 | Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before ... | S | |
CVE-2016-0942 | Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, ... | S | |
CVE-2016-0943 | Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, ... | S | |
CVE-2016-0944 | Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, ... | S | |
CVE-2016-0945 | Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, ... | S | |
CVE-2016-0946 | Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, ... | S | |
CVE-2016-0947 | Untrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and Acrobat b... | S | |
CVE-2016-0948 | Cross-site request forgery (CSRF) vulnerability in Adobe Connect before 9.5.2 allows remote attacker... | | |
CVE-2016-0949 | Adobe Connect before 9.5.2 allows remote attackers to have an unspecified impact via a crafted param... | | |
CVE-2016-0950 | Adobe Connect before 9.5.2 allows remote attackers to spoof the user interface via unspecified vecto... | | |
CVE-2016-0951 | Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 all... | E S | |
CVE-2016-0952 | Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 all... | E S | |
CVE-2016-0953 | Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 all... | E S | |
CVE-2016-0954 | Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of ... | E S | |
CVE-2016-0955 | Cross-site scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.1.0 allows remote authe... | S | |
CVE-2016-0956 | The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0,... | E S | |
CVE-2016-0957 | Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implem... | S | |
CVE-2016-0958 | Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 might allow remote attackers to have an unspecified... | S | |
CVE-2016-0959 | Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Pl... | | |
CVE-2016-0960 | Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and... | S | |
CVE-2016-0961 | Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and... | S | |
CVE-2016-0962 | Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and... | S | |
CVE-2016-0963 | Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on ... | S | |
CVE-2016-0964 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | E S | |
CVE-2016-0965 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | E S | |
CVE-2016-0966 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | S | |
CVE-2016-0967 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | E S | |
CVE-2016-0968 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | S | |
CVE-2016-0969 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | S | |
CVE-2016-0970 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | S | |
CVE-2016-0971 | Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.3... | E S | |
CVE-2016-0972 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | S | |
CVE-2016-0973 | Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18... | S | |
CVE-2016-0974 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0... | E S | |
CVE-2016-0975 | Use-after-free vulnerability in the instanceof function in Adobe Flash Player before 18.0.0.329 and ... | S | |
CVE-2016-0976 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | S | |
CVE-2016-0977 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | S | |
CVE-2016-0978 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | S | |
CVE-2016-0979 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | S | |
CVE-2016-0980 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | S | |
CVE-2016-0981 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | S | |
CVE-2016-0982 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0... | S | |
CVE-2016-0983 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0... | S | |
CVE-2016-0984 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0... | KEV E S | |
CVE-2016-0985 | Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and bef... | E S | |
CVE-2016-0986 | Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and... | S | |
CVE-2016-0987 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21... | S | |
CVE-2016-0988 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21... | S | |
CVE-2016-0989 | Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and... | S | |
CVE-2016-0990 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21... | S | |
CVE-2016-0991 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21... | S | |
CVE-2016-0992 | Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and... | S | |
CVE-2016-0993 | Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on ... | S | |
CVE-2016-0994 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21... | S | |
CVE-2016-0995 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21... | S | |
CVE-2016-0996 | Use-after-free vulnerability in the setInterval method in Adobe Flash Player before 18.0.0.333 and 1... | S | |
CVE-2016-0997 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21... | E S | |
CVE-2016-0998 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21... | E S | |
CVE-2016-0999 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21... | E S |