2016 CVEs¶
27 entries from 2016. 0 ship detection & prevention rules.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2016-10033 — The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow… | Critical (9.8) | — | ✅ |
| CVE-2016-10174 — The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter… | Critical (9.8) | — | ✅ |
| CVE-2016-1019 — Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of… | Critical (9.8) | — | ✅ |
| CVE-2016-1555 — (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and… | Critical (9.8) | — | ✅ |
| CVE-2016-20017 — D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via… | Critical (9.8) | — | ✅ |
| CVE-2016-2386 — SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows… | Critical (9.8) | — | ✅ |
| CVE-2016-3088 — The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote… | Critical (9.8) | — | ✅ |
| CVE-2016-3427 — Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77;… | Critical (9.8) | — | ✅ |
| CVE-2016-4117 — Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary… | Critical (9.8) | — | ✅ |
| CVE-2016-4171 — Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote… | Critical (9.8) | — | ✅ |
| CVE-2016-4437 — Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember… | Critical (9.8) | — | ✅ |
| CVE-2016-7836 — SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in… | Critical (9.8) | — | ✅ |
| CVE-2016-8735 — Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73,… | Critical (9.8) | — | ✅ |
| CVE-2016-0034 — Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding,… | High (8.8) | — | ✅ |
| CVE-2016-0984 — Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x… | High (8.8) | — | ✅ |
| CVE-2016-1010 — Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before… | High (8.8) | — | ✅ |
| CVE-2016-1646 — The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google… | High (8.8) | — | ✅ |
| CVE-2016-4657 — WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or… | High (8.8) | — | ✅ |
| CVE-2016-5198 — V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and… | High (8.8) | — | ✅ |
| CVE-2016-6277 — NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before… | High (8.8) | — | ✅ |
| CVE-2016-6366 — Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on… | High (8.8) | — | ✅ |
| CVE-2016-7200 — The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to… | High (8.8) | — | ✅ |
| CVE-2016-7201 — The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to… | High (8.8) | — | ✅ |
| CVE-2016-7256 — atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008… | High (8.8) | — | ✅ |
| CVE-2016-7855 — Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X… | High (8.8) | — | ✅ |
| CVE-2016-7892 — Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an… | High (8.8) | — | ✅ |
| CVE-2016-3714 — The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT… | High (8.4) | — | ✅ |