By publication date

Exploited and new serious CVEs: May 2016

72 records · 7 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
42Plan	CVE-2016-2105No exploit	Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attaopenssl · openssl · CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	39.6%	May 4, 2016
38Monitor	CVE-2016-2106No exploit	Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote atopenssl · openssl · CWE-189 Pre-auth Denial of service	High7.5	—	27.2%	May 4, 2016
50Plan	CVE-2016-2107Proof of concept	The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding checopenssl · openssl · CWE-200 Pre-auth Info leak	Medium5.9	—	89.0%	May 4, 2016
62This week	CVE-2016-2108No exploit	The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a deniaopenssl · openssl · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	77.9%	May 4, 2016
39Monitor	CVE-2016-2109No exploit	The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h alopenssl · openssl · CWE-399 Pre-auth Denial of service	High7.5	—	29.2%	May 4, 2016
39Monitor	CVE-2016-2176No exploit	The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain openssl · openssl · CWE-119 Pre-auth Memory safety	High8.2	—	23.3%	May 4, 2016
32Monitor	CVE-2016-2168No exploit	The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 alloapache · subversion Denial of service	Medium6.5	—	20.6%	May 5, 2016
92Now	CVE-2016-3714Weaponized	The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x beforimagemagick · imagemagick · CWE-20 RCE	High8.4	KEV	97.4%	May 5, 2016
75This week	CVE-2016-3715Weaponized	The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted imimagemagick · imagemagick · CWE-552	Medium5.5	KEV	75.3%	May 5, 2016
16Monitor	CVE-2016-3716Proof of concept	The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.imagemagick · imagemagick · CWE-264	Low3.3	—	11.3%	May 5, 2016
28Monitor	CVE-2016-3717Proof of concept	The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.imagemagick · imagemagick · CWE-200 Info leak	Medium5.5	—	20.4%	May 5, 2016
75This week	CVE-2016-3718Weaponized	The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request imagemagick · imagemagick · CWE-918 SSRF	Medium5.5	KEV	75.6%	May 5, 2016
32Monitor	CVE-2016-4008No exploit	The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, agnu · libtasn1 · CWE-399 Pre-auth Denial of service	Medium5.9	—	29.4%	May 5, 2016
38Monitor	CVE-2016-1541No exploit	Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remolibarchive · libarchive · CWE-20 pre-auth RCE	High8.8	—	10.2%	May 7, 2016
60This week	CVE-2016-4350No exploit	Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor (SRM) Profiler (formerly Storagsolarwinds · storage resource monitor · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	70.1%	May 9, 2016
58Plan	CVE-2016-4553No exploit	client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which alcanonical · ubuntu linux · CWE-345 Pre-auth	High8.6	—	79.9%	May 10, 2016
46Plan	CVE-2016-4554No exploit	mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisonioracle · linux · CWE-345 Pre-auth	High8.6	—	38.8%	May 10, 2016
35Monitor	CVE-2016-4555No exploit	client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via craftsquid-cache · squid · CWE-20 Pre-auth Denial of service	High7.5	—	18.1%	May 10, 2016
37Monitor	CVE-2016-4556No exploit	Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crasquid-cache · squid Pre-auth Denial of service	High7.5	—	23.1%	May 10, 2016
37Monitor	CVE-2016-0126No exploit	Microsoft Office 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Micromicrosoft · office · CWE-119 RCE Memory safety	High7.8	—	19.6%	May 10, 2016
37Monitor	CVE-2016-0140No exploit	Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remotmicrosoft · office · CWE-119 RCE Memory safety	High7.8	—	19.3%	May 10, 2016
39Monitor	CVE-2016-0168Proof of concept	GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windowsmicrosoft · windows 10 · CWE-200 Pre-auth Info leak	Medium6.5	—	43.2%	May 10, 2016
39Monitor	CVE-2016-0169Proof of concept	GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windowsmicrosoft · windows 10 · CWE-200 Pre-auth Info leak	Medium6.5	—	43.2%	May 10, 2016
50Plan	CVE-2016-0170Proof of concept	GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windowsmicrosoft · windows 10 · CWE-284 pre-auth RCE Broken access control (IDOR)	High8.8	—	48.5%	May 10, 2016
40Plan	CVE-2016-0178No exploit	The RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold microsoft · windows 10 · CWE-264 RCE	High8.8	—	16.7%	May 10, 2016
38Monitor	CVE-2016-0179No exploit	Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execmicrosoft · windows 10 · CWE-284 RCE Broken access control (IDOR)	High7.8	—	24.1%	May 10, 2016
37Monitor	CVE-2016-0182No exploit	Windows Journal in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attacmicrosoft · windows 10 · CWE-284 RCE Broken access control (IDOR)	High7.8	—	19.7%	May 10, 2016
40Plan	CVE-2016-0183No exploit	The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Webmicrosoft · office · CWE-284 pre-auth RCE Broken access control (IDOR)	High8.8	—	15.7%	May 10, 2016
41Plan	CVE-2016-0184No exploit	Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows microsoft · windows 10 pre-auth RCE	High8.8	—	18.7%	May 10, 2016
82Now	CVE-2016-0185Weaponized	Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted microsoft · windows 7 RCE	High7.8	KEV	69.8%	May 10, 2016
36Monitor	CVE-2016-0186No exploit	The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	19.4%	May 10, 2016
36Monitor	CVE-2016-0187No exploit	The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attacmicrosoft · jscript · CWE-119 pre-auth RCE Memory safety	High7.5	—	21.5%	May 10, 2016
40Plan	CVE-2016-0188No exploit	The User Mode Code Integrity (UMCI) implementation in Device Guard in Microsoft Internet Explorer 11 allows remote attackers to bypass a codmicrosoft · internet explorer · CWE-284 Pre-auth Broken access control (IDOR)	High8.8	—	18.3%	May 10, 2016
88Now	CVE-2016-0189Weaponized	The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remomicrosoft · jscript · CWE-787 pre-auth RCE Memory safety	High7.5	KEV	94.0%	May 10, 2016
38Monitor	CVE-2016-0191No exploit	The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	28.2%	May 10, 2016
35Monitor	CVE-2016-0192No exploit	Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (mmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	16.8%	May 10, 2016
36Monitor	CVE-2016-0193No exploit	The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	20.0%	May 10, 2016
26Monitor	CVE-2016-0194No exploit	Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive information via a crafted web microsoft · internet explorer · CWE-200 Pre-auth Info leak	Medium5.3	—	15.5%	May 10, 2016
41Plan	CVE-2016-0195No exploit	The Imaging Component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gomicrosoft · windows 10 · CWE-119 pre-auth RCE Memory safety	High8.8	—	18.4%	May 10, 2016
40Plan	CVE-2016-0198No exploit	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Omicrosoft · office · CWE-119 RCE Memory safety	High7.8	—	29.3%	May 10, 2016
97Now	CVE-2016-4117Weaponized	Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wiladobe · flash player pre-auth RCE	Critical9.8	KEV	94.3%	May 10, 2016
42Plan	CVE-2016-1051No exploit	Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acroadobe · acrobat pre-auth RCE	Critical9.8	—	11.5%	May 11, 2016
44Plan	CVE-2016-1077Proof of concept	Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continadobe · acrobat · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	17.4%	May 11, 2016
33Monitor	CVE-2016-1079No exploit	Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continadobe · acrobat · CWE-200 Pre-auth Info leak	High7.5	—	10.0%	May 11, 2016
42Plan	CVE-2016-1096Proof of concept	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer adobe · flash player Pre-auth	High7.5	—	39.6%	May 11, 2016
33Monitor	CVE-2016-1098No exploit	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer microsoft · edge Pre-auth	High7.5	—	10.3%	May 11, 2016
33Monitor	CVE-2016-1099No exploit	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer microsoft · edge Pre-auth	High7.5	—	10.3%	May 11, 2016
33Monitor	CVE-2016-1100No exploit	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer adobe · flash player Pre-auth	High7.5	—	10.3%	May 11, 2016
41Plan	CVE-2016-1101Proof of concept	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer adobe · flash player Pre-auth	High7.5	—	37.7%	May 11, 2016
42Plan	CVE-2016-1102Proof of concept	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer microsoft · edge Pre-auth	High7.5	—	39.6%	May 11, 2016
41Plan	CVE-2016-1103Proof of concept	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer microsoft · edge Pre-auth	High7.5	—	37.7%	May 11, 2016
42Plan	CVE-2016-1104Proof of concept	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer microsoft · edge Pre-auth	High7.5	—	39.6%	May 11, 2016
41Plan	CVE-2016-1105Proof of concept	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer microsoft · edge Pre-auth	High7.5	—	37.7%	May 11, 2016
41Plan	CVE-2016-1106Proof of concept	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer microsoft · edge Pre-auth	High7.5	—	37.2%	May 11, 2016
41Plan	CVE-2016-4108Proof of concept	Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer microsoft · edge Pre-auth	High7.5	—	37.7%	May 11, 2016
75This week	CVE-2010-5326Weaponized	The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows rsap · netweaver application server java · CWE-306 pre-auth RCE Auth bypass	Critical10.0	KEV	17.7%	May 13, 2016
60This week	CVE-2016-1209Weaponized	The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized ninjaforms · ninja forms · CWE-20 Pre-auth	Critical9.8	—	61.6%	May 14, 2016
60This week	CVE-2016-2296Weaponized	Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remmeteocontrol · web\'log basic 100 · CWE-254 Pre-auth	Critical9.4	—	64.2%	May 14, 2016
60This week	CVE-2016-2298Weaponized	Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext information via unspecifmeteocontrol · web\'log basic 100 · CWE-200 Pre-auth Info leak	Critical9.8	—	25.0%	May 14, 2016
42Plan	CVE-2015-4599No exploit	The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackerphp · php pre-auth RCE	Critical9.8	—	10.7%	May 16, 2016
42Plan	CVE-2015-4600No exploit	The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial ofphp · php pre-auth RCE	Critical9.8	—	10.7%	May 16, 2016
42Plan	CVE-2015-4602No exploit	The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allphp · php pre-auth RCE	Critical9.8	—	10.6%	May 16, 2016
42Plan	CVE-2015-4603No exploit	The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows php · php pre-auth RCE	Critical9.8	—	11.0%	May 16, 2016
44Plan	CVE-2015-4643No exploit	Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remophp · php · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	16.3%	May 16, 2016
53Plan	CVE-2015-6834Proof of concept	Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to executephp · php pre-auth RCE	Critical9.8	—	46.8%	May 16, 2016
50Plan	CVE-2015-6835Proof of concept	The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, wphp · php pre-auth RCE Deserialization	Critical9.8	—	36.1%	May 16, 2016
42Plan	CVE-2016-2554No exploit	Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cauphp · php · CWE-119 Pre-auth Memory safety	Critical9.8	—	10.9%	May 16, 2016
42Plan	CVE-2016-2208Proof of concept	The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or causymantec · anti-virus engine · CWE-399 pre-auth RCE	Critical9.1	—	19.1%	May 19, 2016
45Plan	CVE-2016-4071Proof of concept	Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.php · php · CWE-20 pre-auth RCE	Critical9.8	—	20.4%	May 20, 2016
43Plan	CVE-2016-4543No exploit	The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate Ihp · system management homepage · CWE-119 Pre-auth Memory safety	Critical9.8	—	11.8%	May 21, 2016
40Plan	CVE-2016-4557Weaponized	The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data strlinux · linux kernel Local privilege escalation	High7.8	—	10.2%	May 23, 2016
43Plan	CVE-2016-0718No exploit	Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input docummozilla · firefox · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	13.3%	May 26, 2016

CVE-2016-2105
42Plan
Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote atta
HighCVSS 7.5No exploitEPSS 39%
- Pre-auth
- Memory safety
- Denial of service
openssl · opensslMay 4, 2016
CVE-2016-2106
38Monitor
Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote at
HighCVSS 7.5No exploitEPSS 27%
- Pre-auth
- Denial of service
openssl · opensslMay 4, 2016
CVE-2016-2107
50Plan
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding chec
MediumCVSS 5.9Proof of conceptEPSS 89%
- Pre-auth
- Info leak
openssl · opensslMay 4, 2016
CVE-2016-2108
62This week
The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denia
CriticalCVSS 9.8No exploitEPSS 77%
- pre-auth RCE
- Memory safety
openssl · opensslMay 4, 2016
CVE-2016-2109
39Monitor
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h al
HighCVSS 7.5No exploitEPSS 29%
- Pre-auth
- Denial of service
openssl · opensslMay 4, 2016
CVE-2016-2176
39Monitor
The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain
HighCVSS 8.2No exploitEPSS 23%
- Pre-auth
- Memory safety
openssl · opensslMay 4, 2016
CVE-2016-2168
32Monitor
The req_check_access function in the mod_authz_svn module in the httpd server in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4 allo
MediumCVSS 6.5No exploitEPSS 20%
- Denial of service
apache · subversionMay 5, 2016
CVE-2016-3714
92Now
The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x befor
HighCVSS 8.4KEVWeaponizedEPSS 97%
- RCE
imagemagick · imagemagickMay 5, 2016
CVE-2016-3715
75This week
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted im
MediumCVSS 5.5KEVWeaponizedEPSS 75%
imagemagick · imagemagickMay 5, 2016
CVE-2016-3716
16Monitor
The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.
LowCVSS 3.3Proof of conceptEPSS 11%
imagemagick · imagemagickMay 5, 2016
CVE-2016-3717
28Monitor
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
MediumCVSS 5.5Proof of conceptEPSS 20%
- Info leak
imagemagick · imagemagickMay 5, 2016
CVE-2016-3718
75This week
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request
MediumCVSS 5.5KEVWeaponizedEPSS 75%
- SSRF
imagemagick · imagemagickMay 5, 2016
CVE-2016-4008
32Monitor
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, a
MediumCVSS 5.9No exploitEPSS 29%
- Pre-auth
- Denial of service
gnu · libtasn1May 5, 2016
CVE-2016-1541
38Monitor
Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remo
HighCVSS 8.8No exploitEPSS 10%
- pre-auth RCE
libarchive · libarchiveMay 7, 2016
CVE-2016-4350
60This week
Multiple SQL injection vulnerabilities in the Web Services web server in SolarWinds Storage Resource Monitor (SRM) Profiler (formerly Storag
CriticalCVSS 9.8No exploitEPSS 70%
- pre-auth RCE
- SQL injection
solarwinds · storage resource monitorMay 9, 2016
CVE-2016-4553
58Plan
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which al
HighCVSS 8.6No exploitEPSS 79%
- Pre-auth
canonical · ubuntu linuxMay 10, 2016
CVE-2016-4554
46Plan
mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoni
HighCVSS 8.6No exploitEPSS 38%
- Pre-auth
oracle · linuxMay 10, 2016
CVE-2016-4555
35Monitor
client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via craft
HighCVSS 7.5No exploitEPSS 18%
- Pre-auth
- Denial of service
squid-cache · squidMay 10, 2016
CVE-2016-4556
37Monitor
Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (cra
HighCVSS 7.5No exploitEPSS 23%
- Pre-auth
- Denial of service
squid-cache · squidMay 10, 2016
CVE-2016-0126
37Monitor
Microsoft Office 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Micro
HighCVSS 7.8No exploitEPSS 19%
- RCE
- Memory safety
microsoft · officeMay 10, 2016
CVE-2016-0140
37Monitor
Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remot
HighCVSS 7.8No exploitEPSS 19%
- RCE
- Memory safety
microsoft · officeMay 10, 2016
CVE-2016-0168
39Monitor
GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows
MediumCVSS 6.5Proof of conceptEPSS 43%
- Pre-auth
- Info leak
microsoft · windows 10May 10, 2016
CVE-2016-0169
39Monitor
GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows
MediumCVSS 6.5Proof of conceptEPSS 43%
- Pre-auth
- Info leak
microsoft · windows 10May 10, 2016
CVE-2016-0170
50Plan
GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows
HighCVSS 8.8Proof of conceptEPSS 48%
- pre-auth RCE
- Broken access control (IDOR)
microsoft · windows 10May 10, 2016
CVE-2016-0178
40Plan
The RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold
HighCVSS 8.8No exploitEPSS 16%
- RCE
microsoft · windows 10May 10, 2016
CVE-2016-0179
38Monitor
Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to exec
HighCVSS 7.8No exploitEPSS 24%
- RCE
- Broken access control (IDOR)
microsoft · windows 10May 10, 2016
CVE-2016-0182
37Monitor
Windows Journal in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attac
HighCVSS 7.8No exploitEPSS 19%
- RCE
- Broken access control (IDOR)
microsoft · windows 10May 10, 2016
CVE-2016-0183
40Plan
The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web
HighCVSS 8.8No exploitEPSS 15%
- pre-auth RCE
- Broken access control (IDOR)
microsoft · officeMay 10, 2016
CVE-2016-0184
41Plan
Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows
HighCVSS 8.8No exploitEPSS 18%
- pre-auth RCE
microsoft · windows 10May 10, 2016
CVE-2016-0185
82Now
Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted
HighCVSS 7.8KEVWeaponizedEPSS 69%
- RCE
microsoft · windows 7May 10, 2016
CVE-2016-0186
36Monitor
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup
HighCVSS 7.5No exploitEPSS 19%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 10, 2016
CVE-2016-0187
36Monitor
The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attac
HighCVSS 7.5No exploitEPSS 21%
- pre-auth RCE
- Memory safety
microsoft · jscriptMay 10, 2016
CVE-2016-0188
40Plan
The User Mode Code Integrity (UMCI) implementation in Device Guard in Microsoft Internet Explorer 11 allows remote attackers to bypass a cod
HighCVSS 8.8No exploitEPSS 18%
- Pre-auth
- Broken access control (IDOR)
microsoft · internet explorerMay 10, 2016
CVE-2016-0189
88Now
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remo
HighCVSS 7.5KEVWeaponizedEPSS 94%
- pre-auth RCE
- Memory safety
microsoft · jscriptMay 10, 2016
CVE-2016-0191
38Monitor
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup
HighCVSS 7.5No exploitEPSS 28%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 10, 2016
CVE-2016-0192
35Monitor
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m
HighCVSS 7.5No exploitEPSS 16%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 10, 2016
CVE-2016-0193
36Monitor
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup
HighCVSS 7.5No exploitEPSS 20%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 10, 2016
CVE-2016-0194
26Monitor
Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass file permissions and obtain sensitive information via a crafted web
MediumCVSS 5.3No exploitEPSS 15%
- Pre-auth
- Info leak
microsoft · internet explorerMay 10, 2016
CVE-2016-0195
41Plan
The Imaging Component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go
HighCVSS 8.8No exploitEPSS 18%
- pre-auth RCE
- Memory safety
microsoft · windows 10May 10, 2016
CVE-2016-0198
40Plan
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, O
HighCVSS 7.8No exploitEPSS 29%
- RCE
- Memory safety
microsoft · officeMay 10, 2016
CVE-2016-4117
97Now
Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wil
CriticalCVSS 9.8KEVWeaponizedEPSS 94%
- pre-auth RCE
adobe · flash playerMay 10, 2016
CVE-2016-1051
42Plan
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acro
CriticalCVSS 9.8No exploitEPSS 11%
- pre-auth RCE
adobe · acrobatMay 11, 2016
CVE-2016-1077
44Plan
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Contin
CriticalCVSS 9.8Proof of conceptEPSS 17%
- pre-auth RCE
- Memory safety
adobe · acrobatMay 11, 2016
CVE-2016-1079
33Monitor
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Contin
HighCVSS 7.5No exploitEPSS 10%
- Pre-auth
- Info leak
adobe · acrobatMay 11, 2016
CVE-2016-1096
42Plan
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer
HighCVSS 7.5Proof of conceptEPSS 39%
- Pre-auth
adobe · flash playerMay 11, 2016
CVE-2016-1098
33Monitor
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer
HighCVSS 7.5No exploitEPSS 10%
- Pre-auth
microsoft · edgeMay 11, 2016
CVE-2016-1099
33Monitor
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer
HighCVSS 7.5No exploitEPSS 10%
- Pre-auth
microsoft · edgeMay 11, 2016
CVE-2016-1100
33Monitor
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer
HighCVSS 7.5No exploitEPSS 10%
- Pre-auth
adobe · flash playerMay 11, 2016
CVE-2016-1101
41Plan
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer
HighCVSS 7.5Proof of conceptEPSS 37%
- Pre-auth
adobe · flash playerMay 11, 2016
CVE-2016-1102
42Plan
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer
HighCVSS 7.5Proof of conceptEPSS 39%
- Pre-auth
microsoft · edgeMay 11, 2016
CVE-2016-1103
41Plan
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer
HighCVSS 7.5Proof of conceptEPSS 37%
- Pre-auth
microsoft · edgeMay 11, 2016
CVE-2016-1104
42Plan
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer
HighCVSS 7.5Proof of conceptEPSS 39%
- Pre-auth
microsoft · edgeMay 11, 2016
CVE-2016-1105
41Plan
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer
HighCVSS 7.5Proof of conceptEPSS 37%
- Pre-auth
microsoft · edgeMay 11, 2016
CVE-2016-1106
41Plan
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer
HighCVSS 7.5Proof of conceptEPSS 37%
- Pre-auth
microsoft · edgeMay 11, 2016
CVE-2016-4108
41Plan
Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer
HighCVSS 7.5Proof of conceptEPSS 37%
- Pre-auth
microsoft · edgeMay 11, 2016
CVE-2010-5326
75This week
The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows r
CriticalCVSS 10.0KEVWeaponizedEPSS 17%
- pre-auth RCE
- Auth bypass
sap · netweaver application server javaMay 13, 2016
CVE-2016-1209
60This week
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized
CriticalCVSS 9.8WeaponizedEPSS 61%
- Pre-auth
ninjaforms · ninja formsMay 14, 2016
CVE-2016-2296
60This week
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows rem
CriticalCVSS 9.4WeaponizedEPSS 64%
- Pre-auth
meteocontrol · web\'log basic 100May 14, 2016
CVE-2016-2298
60This week
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext information via unspecif
CriticalCVSS 9.8WeaponizedEPSS 25%
- Pre-auth
- Info leak
meteocontrol · web\'log basic 100May 14, 2016
CVE-2015-4599
42Plan
The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attacker
CriticalCVSS 9.8No exploitEPSS 10%
- pre-auth RCE
php · phpMay 16, 2016
CVE-2015-4600
42Plan
The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of
CriticalCVSS 9.8No exploitEPSS 10%
- pre-auth RCE
php · phpMay 16, 2016
CVE-2015-4602
42Plan
The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 all
CriticalCVSS 9.8No exploitEPSS 10%
- pre-auth RCE
php · phpMay 16, 2016
CVE-2015-4603
42Plan
The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows
CriticalCVSS 9.8No exploitEPSS 11%
- pre-auth RCE
php · phpMay 16, 2016
CVE-2015-4643
44Plan
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remo
CriticalCVSS 9.8No exploitEPSS 16%
- pre-auth RCE
- Memory safety
php · phpMay 16, 2016
CVE-2015-6834
53Plan
Multiple use-after-free vulnerabilities in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 allow remote attackers to execute
CriticalCVSS 9.8Proof of conceptEPSS 46%
- pre-auth RCE
php · phpMay 16, 2016
CVE-2015-6835
50Plan
The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, w
CriticalCVSS 9.8Proof of conceptEPSS 36%
- pre-auth RCE
- Deserialization
php · phpMay 16, 2016
CVE-2016-2554
42Plan
Stack-based buffer overflow in ext/phar/tar.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 allows remote attackers to cau
CriticalCVSS 9.8No exploitEPSS 10%
- Pre-auth
- Memory safety
php · phpMay 16, 2016
CVE-2016-2208
42Plan
The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cau
CriticalCVSS 9.1Proof of conceptEPSS 19%
- pre-auth RCE
symantec · anti-virus engineMay 19, 2016
CVE-2016-4071
45Plan
Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.
CriticalCVSS 9.8Proof of conceptEPSS 20%
- pre-auth RCE
php · phpMay 20, 2016
CVE-2016-4543
43Plan
The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate I
CriticalCVSS 9.8No exploitEPSS 11%
- Pre-auth
- Memory safety
hp · system management homepageMay 21, 2016
CVE-2016-4557
40Plan
The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data str
HighCVSS 7.8WeaponizedEPSS 10%
- Local privilege escalation
linux · linux kernelMay 23, 2016
CVE-2016-0718
43Plan
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input docum
CriticalCVSS 9.8No exploitEPSS 13%
- pre-auth RCE
- Memory safety
mozilla · firefoxMay 26, 2016