Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: April 2016

76 records · 8 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2016-0793
    34Monitor

    Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.

    HighCVSS 7.5Proof of conceptEPSS 14%

    redhat · jboss wildfly application serverApr 1, 2016

  • CVE-2016-1019
    76This week

    Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbit

    CriticalCVSS 9.8KEVWeaponizedEPSS 22%

    adobe · flash player desktop runtimeApr 7, 2016

  • CVE-2016-3947
    36Monitor

    Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 al

    HighCVSS 8.2No exploitEPSS 14%

    squid-cache · squidApr 7, 2016

  • CVE-2016-3948
    41Plan

    Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service

    HighCVSS 7.5No exploitEPSS 35%

    squid-cache · squidApr 7, 2016

  • CVE-2016-3974
    41Plan

    XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 through 7.5 allows remote attackers to caus

    CriticalCVSS 9.1Proof of conceptEPSS 15%

    sap · netweaver application server javaApr 7, 2016

  • CVE-2016-2510
    53Plan

    BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attack

    HighCVSS 8.1No exploitEPSS 70%

    beanshell · beanshellApr 7, 2016

  • CVE-2016-0788
    43Plan

    The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP liste

    CriticalCVSS 9.8No exploitEPSS 11%

    jenkins · jenkinsApr 7, 2016

  • CVE-2016-0792
    60This week

    Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code

    HighCVSS 8.8WeaponizedEPSS 83%

    jenkins · jenkinsApr 7, 2016

  • CVE-2016-1531
    40Plan

    Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.

    HighCVSS 7.0WeaponizedEPSS 6%

    exim · eximApr 7, 2016

  • CVE-2016-2098
    60This week

    Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Rub

    HighCVSS 7.3WeaponizedEPSS 81%

    debian · debian linuxApr 7, 2016

  • CVE-2016-2563
    49Plan

    Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows remote servers to cau

    CriticalCVSS 9.8Proof of conceptEPSS 34%

    9bis · kittyApr 7, 2016

  • CVE-2016-2851
    47Plan

    Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corrupti

    CriticalCVSS 9.8Proof of conceptEPSS 25%

    debian · debian linuxApr 7, 2016

  • CVE-2016-3976
    74This week

    Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot do

    HighCVSS 7.5KEVWeaponizedEPSS 47%

    sap · netweaver application server javaApr 7, 2016

  • CVE-2016-2315
    44Plan

    revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long f

    CriticalCVSS 9.8No exploitEPSS 17%

    suse · linux enterprise debuginfoApr 8, 2016

  • CVE-2016-2324
    44Plan

    Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, whi

    CriticalCVSS 9.8No exploitEPSS 18%

    suse · linux enterprise debuginfoApr 8, 2016

  • CVE-2016-1011
    43Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before

    HighCVSS 8.8Proof of conceptEPSS 26%

    adobe · flash playerApr 8, 2016

  • CVE-2016-1013
    42Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before

    HighCVSS 8.8Proof of conceptEPSS 22%

    adobe · flash playerApr 8, 2016

  • CVE-2016-0709
    51Plan

    Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote aut

    HighCVSS 7.2WeaponizedEPSS 77%

    apache · jetspeedApr 11, 2016

  • CVE-2016-0710
    51Plan

    Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitra

    HighCVSS 8.8WeaponizedEPSS 52%

    apache · jetspeedApr 11, 2016

  • CVE-2016-0784
    43Plan

    Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authen

    MediumCVSS 6.5Proof of conceptEPSS 56%

    apache · openmeetingsApr 11, 2016

  • CVE-2016-2171
    43Plan

    The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote atta

    HighCVSS 7.5No exploitEPSS 42%

    apache · jetspeedApr 11, 2016

  • CVE-2016-2385
    48Plan

    Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in Kamailio (formerly OpenSER and SER) before 4.3.5

    CriticalCVSS 9.8Proof of conceptEPSS 30%

    kamailio · kamailioApr 11, 2016

  • CVE-2015-8399
    35Monitor

    Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spac

    MediumCVSS 4.3Proof of conceptEPSS 60%

    atlassian · confluenceApr 11, 2016

  • CVE-2016-3987
    46Plan

    The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url parameter to (1) api/ope

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    trendmicro · password managerApr 11, 2016

  • CVE-2016-2170
    43Plan

    Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serializ

    CriticalCVSS 9.8No exploitEPSS 12%

    apache · ofbizApr 12, 2016

  • CVE-2016-4003
    27Monitor

    Cross-site scripting (XSS) vulnerability in the URLDecoder function in JRE before 1.8, as used in Apache Struts 2.x before 2.3.28, when usin

    MediumCVSS 6.1No exploitEPSS 11%

    apache · strutsApr 12, 2016

  • CVE-2016-0122
    43Plan

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word 2016 for Mac, Office Compatibility Pack SP3, a

    HighCVSS 7.8Proof of conceptEPSS 41%

    microsoft · excelApr 12, 2016

  • CVE-2016-0127
    37Monitor

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word A

    HighCVSS 7.8No exploitEPSS 21%

    microsoft · officeApr 12, 2016

  • CVE-2016-0128
    33Monitor

    The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Wi

    MediumCVSS 6.8No exploitEPSS 20%

    microsoft · windows 10Apr 12, 2016

  • CVE-2016-0136
    37Monitor

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on

    HighCVSS 7.8No exploitEPSS 20%

    microsoft · excelApr 12, 2016

  • CVE-2016-0139
    36Monitor

    Microsoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document

    HighCVSS 7.8No exploitEPSS 16%

    microsoft · excelApr 12, 2016

  • CVE-2016-0145
    48Plan

    The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an

    HighCVSS 8.8Proof of conceptEPSS 43%

    microsoft · .net frameworkApr 12, 2016

  • CVE-2016-0147
    40Plan

    Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Executi

    HighCVSS 8.8No exploitEPSS 15%

    microsoft · xml core servicesApr 12, 2016

  • CVE-2016-0148
    35Monitor

    Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, ak

    HighCVSS 7.8No exploitEPSS 13%

    microsoft · .net frameworkApr 12, 2016

  • CVE-2016-0150
    39Monitor

    HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via crafted HTTP 2.0 reque

    HighCVSS 7.5No exploitEPSS 28%

    microsoft · windows 10Apr 12, 2016

  • CVE-2016-0151
    80Now

    The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold

    HighCVSS 7.8KEVWeaponizedEPSS 62%

    microsoft · windows 10 1507Apr 12, 2016

  • CVE-2016-0153
    37Monitor

    OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Win

    HighCVSS 7.8No exploitEPSS 21%

    microsoft · windows 7Apr 12, 2016

  • CVE-2016-0154
    34Monitor

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · edgeApr 12, 2016

  • CVE-2016-0155
    33Monitor

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    HighCVSS 7.5No exploitEPSS 10%

    microsoft · edgeApr 12, 2016

  • CVE-2016-0156
    36Monitor

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · edgeApr 12, 2016

  • CVE-2016-0157
    35Monitor

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · edgeApr 12, 2016

  • CVE-2016-0158
    31Monitor

    Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege

    MediumCVSS 6.5No exploitEPSS 15%

    microsoft · edgeApr 12, 2016

  • CVE-2016-0159
    35Monitor

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · internet explorerApr 12, 2016

  • CVE-2016-0160
    35Monitor

    Microsoft Internet Explorer 11 mishandles DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loadi

    HighCVSS 7.8No exploitEPSS 12%

    microsoft · internet explorerApr 12, 2016

  • CVE-2016-0161
    47Plan

    Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege

    MediumCVSS 6.5No exploitEPSS 68%

    microsoft · edgeApr 12, 2016

  • CVE-2016-0162
    60This week

    Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Inter

    MediumCVSS 4.3KEVWeaponizedEPSS 22%

    microsoft · internet explorerApr 12, 2016

  • CVE-2016-0164
    34Monitor

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · internet explorerApr 12, 2016

  • CVE-2016-0165
    65This week

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G

    HighCVSS 7.8KEVWeaponizedEPSS 13%

    microsoft · windows 10 1507Apr 12, 2016

  • CVE-2016-0166
    35Monitor

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · internet explorerApr 12, 2016

  • CVE-2016-0167
    63This week

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 G

    HighCVSS 7.8KEVWeaponizedEPSS 5%

    microsoft · windows 10 1507Apr 12, 2016

  • CVE-2016-2118
    41Plan

    The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DC

    HighCVSS 7.5Proof of conceptEPSS 36%

    samba · sambaApr 12, 2016

  • CVE-2015-7545
    45Plan

    The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    git project · gitApr 13, 2016

  • CVE-2016-2055
    60This week

    xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration

    HighCVSS 7.5WeaponizedEPSS 17%

    xymon · xymonApr 13, 2016

  • CVE-2016-2056
    51Plan

    xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacter

    HighCVSS 8.8WeaponizedEPSS 54%

    xymon · xymonApr 13, 2016

  • CVE-2015-5343
    39Monitor

    Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticate

    HighCVSS 7.6No exploitEPSS 30%

    apache · subversionApr 14, 2016

  • CVE-2016-2390
    31Monitor

    The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake err

    MediumCVSS 5.9No exploitEPSS 25%

    squid-cache · squidApr 19, 2016

  • CVE-2016-0638
    58Plan

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remo

    CriticalCVSS 9.8Proof of conceptEPSS 62%

    oracle · weblogic serverApr 21, 2016

  • CVE-2016-0639
    42Plan

    Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote attackers to affect confidentiality, integ

    CriticalCVSS 9.8No exploitEPSS 10%

    oracle · mysqlApr 21, 2016

  • CVE-2016-2004
    67This week

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified ve

    CriticalCVSS 9.8WeaponizedEPSS 94%

    hp · data protectorApr 21, 2016

  • CVE-2016-2005
    45Plan

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified v

    CriticalCVSS 9.8No exploitEPSS 20%

    hp · data protectorApr 21, 2016

  • CVE-2016-2006
    45Plan

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified v

    CriticalCVSS 9.8No exploitEPSS 20%

    hp · data protectorApr 21, 2016

  • CVE-2016-2007
    45Plan

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified v

    CriticalCVSS 9.8No exploitEPSS 20%

    hp · data protectorApr 21, 2016

  • CVE-2016-2008
    42Plan

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified v

    CriticalCVSS 9.8No exploitEPSS 10%

    hp · data protectorApr 21, 2016

  • CVE-2016-3427
    97Now

    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to aff

    CriticalCVSS 9.8KEVWeaponizedEPSS 92%

    oracle · jdkApr 21, 2016

  • CVE-2016-1593
    47Plan

    Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated admi

    HighCVSS 7.2WeaponizedEPSS 64%

    novell · service deskApr 22, 2016

  • CVE-2016-2203
    40Plan

    The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD pa

    HighCVSS 7.8WeaponizedEPSS 7%

    symantec · messaging gatewayApr 22, 2016

  • CVE-2015-5370
    29Monitor

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remo

    MediumCVSS 5.9No exploitEPSS 19%

    samba · sambaApr 24, 2016

  • CVE-2016-2115
    26Monitor

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_

    MediumCVSS 5.9No exploitEPSS 10%

    samba · sambaApr 24, 2016

  • CVE-2016-4051
    40Plan

    Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of serv

    HighCVSS 8.8No exploitEPSS 18%

    canonical · ubuntu linuxApr 25, 2016

  • CVE-2016-4052
    36Monitor

    Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to cause a denial of service

    HighCVSS 8.1No exploitEPSS 12%

    canonical · ubuntu linuxApr 25, 2016

  • CVE-2016-4053
    18Monitor

    Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Inclu

    LowCVSS 3.7No exploitEPSS 14%

    squid-cache · squidApr 25, 2016

  • CVE-2016-4054
    55Plan

    Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Incl

    HighCVSS 8.1No exploitEPSS 77%

    canonical · ubuntu linuxApr 25, 2016

  • CVE-2016-3074
    50Plan

    Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or

    CriticalCVSS 9.8Proof of conceptEPSS 37%

    libgd · libgdApr 26, 2016

  • CVE-2016-3082
    45Plan

    XSLTResult in Apache Struts 2.x before 2.3.20.2, 2.3.24.x before 2.3.24.2, and 2.3.28.x before 2.3.28.1 allows remote attackers to execute a

    CriticalCVSS 9.8No exploitEPSS 19%

    apache · strutsApr 26, 2016

  • CVE-2016-3081
    91Now

    Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attacker

    HighCVSS 8.1KEVWeaponizedEPSS 96%

    apache · strutsApr 26, 2016

  • CVE-2015-8812
    43Plan

    drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attack

    CriticalCVSS 9.8No exploitEPSS 14%

    linux · linux kernelApr 27, 2016