Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2016

49 records · 6 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2016-5639
    36Monitor

    Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attac

    HighCVSS 7.5Proof of conceptEPSS 20%

    crestron · airmedia am-100 firmwareAug 2, 2016

  • CVE-2016-5640
    44Plan

    Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote atta

    CriticalCVSS 9.8Proof of conceptEPSS 17%

    crestron · airmedia am-100 firmwareAug 2, 2016

  • CVE-2016-5696
    23Monitor

    net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier fo

    MediumCVSS 4.8Proof of conceptEPSS 14%

    linux · linux kernelAug 6, 2016

  • CVE-2016-3078
    56Plan

    Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-b

    CriticalCVSS 9.8Proof of conceptEPSS 56%

    php · phpAug 7, 2016

  • CVE-2016-3132
    43Plan

    Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attac

    CriticalCVSS 9.8No exploitEPSS 11%

    php · phpAug 7, 2016

  • CVE-2016-5771
    44Plan

    spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and g

    CriticalCVSS 9.8No exploitEPSS 15%

    php · phpAug 7, 2016

  • CVE-2016-6515
    48Plan

    The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which

    HighCVSS 7.5Proof of conceptEPSS 58%

    openbsd · opensshAug 7, 2016

  • CVE-2016-2960
    26Monitor

    IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty b

    LowCVSS 3.7No exploitEPSS 39%

    ibm · websphere application serverAug 7, 2016

  • CVE-2016-5330
    40Plan

    Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware W

    HighCVSS 7.8WeaponizedEPSS 18%

    vmware · workstation playerAug 7, 2016

  • CVE-2016-3237
    35Monitor

    Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Wi

    HighCVSS 7.5Proof of conceptEPSS 17%

    microsoft · windows 10Aug 9, 2016

  • CVE-2016-3288
    46Plan

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corru

    HighCVSS 7.5Proof of conceptEPSS 51%

    microsoft · internet explorerAug 9, 2016

  • CVE-2016-3289
    35Monitor

    Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memo

    HighCVSS 7.5No exploitEPSS 17%

    microsoft · edgeAug 9, 2016

  • CVE-2016-3290
    35Monitor

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corru

    HighCVSS 7.5No exploitEPSS 16%

    microsoft · internet explorerAug 9, 2016

  • CVE-2016-3293
    34Monitor

    Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Br

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · edgeAug 9, 2016

  • CVE-2016-3296
    34Monitor

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engi

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · edgeAug 9, 2016

  • CVE-2016-3299
    25Monitor

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1

    MediumCVSS 5.3No exploitEPSS 13%

    microsoft · windows 10Aug 9, 2016

  • CVE-2016-3301
    44Plan

    The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012

    HighCVSS 7.8Proof of conceptEPSS 44%

    microsoft · live meetingAug 9, 2016

  • CVE-2016-3303
    46Plan

    The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2

    HighCVSS 7.8Proof of conceptEPSS 50%

    microsoft · live meetingAug 9, 2016

  • CVE-2016-3304
    46Plan

    The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2

    HighCVSS 7.8Proof of conceptEPSS 50%

    microsoft · live meetingAug 9, 2016

  • CVE-2016-3309
    67This week

    The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012

    HighCVSS 7.8KEVWeaponizedEPSS 20%

    microsoft · windows 10 1507Aug 9, 2016

  • CVE-2016-3315
    31Monitor

    Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information v

    MediumCVSS 5.5No exploitEPSS 30%

    microsoft · onenoteAug 9, 2016

  • CVE-2016-3316
    45Plan

    Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Micro

    HighCVSS 7.8Proof of conceptEPSS 47%

    microsoft · wordAug 9, 2016

  • CVE-2016-3317
    38Monitor

    Microsoft Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Word for Mac 2011, Word 2016 for Mac, and Word Viewer allow remote attackers to exe

    HighCVSS 7.8No exploitEPSS 22%

    microsoft · officeAug 9, 2016

  • CVE-2016-3318
    38Monitor

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted file, aka "Gra

    HighCVSS 7.8No exploitEPSS 22%

    microsoft · officeAug 9, 2016

  • CVE-2016-3319
    34Monitor

    The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attack

    HighCVSS 7.0No exploitEPSS 18%

    microsoft · edgeAug 9, 2016

  • CVE-2016-3321
    40Plan

    Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which al

    LowCVSS 2.5WeaponizedEPSS 36%

    microsoft · internet explorerAug 9, 2016

  • CVE-2016-3322
    34Monitor

    Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memo

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · edgeAug 9, 2016

  • CVE-2016-3326
    26Monitor

    Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Micros

    MediumCVSS 5.3No exploitEPSS 15%

    microsoft · edgeAug 9, 2016

  • CVE-2016-3327
    25Monitor

    Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Micros

    MediumCVSS 5.3No exploitEPSS 14%

    microsoft · edgeAug 9, 2016

  • CVE-2016-3329
    25Monitor

    Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Int

    MediumCVSS 5.3No exploitEPSS 14%

    microsoft · edgeAug 9, 2016

  • CVE-2016-3313
    46Plan

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute a

    HighCVSS 7.8Proof of conceptEPSS 49%

    microsoft · officeAug 9, 2016

  • CVE-2016-5419
    35Monitor

    curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers

    HighCVSS 7.5No exploitEPSS 15%

    haxx · libcurlAug 10, 2016

  • CVE-2016-5420
    35Monitor

    curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attac

    HighCVSS 7.5No exploitEPSS 15%

    debian · debian linuxAug 10, 2016

  • CVE-2016-6366
    91Now

    Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V,

    HighCVSS 8.8KEVWeaponizedEPSS 87%

    cisco · pix firewall softwareAug 18, 2016

  • CVE-2016-6367
    68This week

    Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain pri

    HighCVSS 7.8KEVWeaponizedEPSS 22%

    cisco · adaptive security appliance softwareAug 18, 2016

  • CVE-2016-5645
    38Monitor

    Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a h

    HighCVSS 7.3No exploitEPSS 29%

    rockwellautomation · 1766-l32awaAug 23, 2016

  • CVE-2016-6909
    54Plan

    Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch befo

    CriticalCVSS 9.8Proof of conceptEPSS 49%

    fortinet · fortiosAug 24, 2016

  • CVE-2016-4655
    62This week

    The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

    MediumCVSS 5.5KEVWeaponizedEPSS 33%

    apple · iphone osAug 25, 2016

  • CVE-2016-4656
    68This week

    The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory

    HighCVSS 7.8KEVWeaponizedEPSS 23%

    apple · iphone osAug 25, 2016

  • CVE-2016-4657
    85Now

    WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cr

    HighCVSS 8.8KEVWeaponizedEPSS 66%

    apple · iphone osAug 25, 2016

  • CVE-2016-5681
    43Plan

    Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR

    CriticalCVSS 9.8No exploitEPSS 11%

    d-link · dir-880l firmwareAug 25, 2016

  • CVE-2016-6195
    60This week

    SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 al

    CriticalCVSS 9.8Proof of conceptEPSS 68%

    vbulletin · vbulletinAug 30, 2016

  • CVE-2016-5674
    67This week

    __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1

    CriticalCVSS 9.8WeaponizedEPSS 94%

    netgear · readynas surveillanceAug 31, 2016

  • CVE-2016-5675
    60This week

    handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NET

    CriticalCVSS 9.8WeaponizedEPSS 70%

    nuuo · crystalAug 31, 2016

  • CVE-2016-5676
    60This week

    cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.

    HighCVSS 7.5WeaponizedEPSS 53%

    netgear · readynas surveillanceAug 31, 2016

  • CVE-2016-5677
    34Monitor

    NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded

    HighCVSS 7.5Proof of conceptEPSS 11%

    netgear · readynas surveillanceAug 31, 2016

  • CVE-2016-5679
    39Monitor

    cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute

    HighCVSS 8.8Proof of conceptEPSS 14%

    nuuo · nvrmini 2Aug 31, 2016

  • CVE-2016-5680
    40Plan

    Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote

    HighCVSS 8.8Proof of conceptEPSS 16%

    nuuo · nvrmini 2Aug 31, 2016

  • CVE-2016-2183
    58Plan

    The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of appr

    HighCVSS 7.5Proof of conceptEPSS 94%

    redhat · jboss enterprise application platformAug 31, 2016