İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2016: sömürülen ve yeni ciddi CVE kayıtları

84 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2016-1606
    53Planlayın

    Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitr

    KritikCVSS 9,8Kavram kanıtıEPSS %45

    microfocus · rumba2 Tem 2016

  • CVE-2016-5228
    44Planlayın

    Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba 9.x before 9.3 HF 11

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    microfocus · rumba2 Tem 2016

  • CVE-2016-5734
    63Bu hafta

    phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the p

    KritikCVSS 9,8SilahlaştırılmışEPSS %81

    phpmyadmin · phpmyadmin2 Tem 2016

  • CVE-2016-3955
    47Planlayın

    The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial

    KritikCVSS 9,8Kavram kanıtıEPSS %25

    linux · linux kernel3 Tem 2016

  • CVE-2016-4997
    40Planlayın

    The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3

    YüksekCVSS 7,8SilahlaştırılmışEPSS %5

    linux · linux kernel3 Tem 2016

  • CVE-2016-4998
    40Planlayın

    The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a den

    YüksekCVSS 7,1SilahlaştırılmışEPSS %1

    linux · linux kernel3 Tem 2016

  • CVE-2015-0899
    36İzleyin

    The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions v

    YüksekCVSS 7,5İstismar yokEPSS %21

    apache · struts4 Tem 2016

  • CVE-2016-4438
    44Planlayın

    The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    apache · struts4 Tem 2016

  • CVE-2016-4465
    24İzleyin

    The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of servic

    OrtaCVSS 5,3İstismar yokEPSS %10

    apache · struts4 Tem 2016

  • CVE-2016-4953
    35İzleyin

    ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoo

    YüksekCVSS 7,5İstismar yokEPSS %17

    ntp · ntp4 Tem 2016

  • CVE-2016-4954
    34İzleyin

    The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-vari

    YüksekCVSS 7,5İstismar yokEPSS %13

    ntp · ntp4 Tem 2016

  • CVE-2016-4956
    26İzleyin

    ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoo

    OrtaCVSS 5,3İstismar yokEPSS %16

    ntp · ntp4 Tem 2016

  • CVE-2016-4957
    43Planlayın

    ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet.

    YüksekCVSS 7,5İstismar yokEPSS %44

    ntp · ntp4 Tem 2016

  • CVE-2016-1181
    36İzleyin

    ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote atta

    YüksekCVSS 8,1İstismar yokEPSS %13

    apache · struts4 Tem 2016

  • CVE-2016-1182
    40Planlayın

    ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attacke

    YüksekCVSS 8,2İstismar yokEPSS %25

    apache · struts4 Tem 2016

  • CVE-2016-3092
    41Planlayın

    The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x be

    YüksekCVSS 7,5İstismar yokEPSS %37

    apache · tomcat4 Tem 2016

  • CVE-2016-1546
    28İzleyin

    The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of simultaneous stream workers for a single H

    OrtaCVSS 5,9İstismar yokEPSS %15

    apache · http server6 Tem 2016

  • CVE-2016-4979
    36İzleyin

    The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "SSLVerifyClient requi

    YüksekCVSS 7,5İstismar yokEPSS %18

    apache · http server6 Tem 2016

  • CVE-2016-6170
    38İzleyin

    ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (se

    OrtaCVSS 6,5İstismar yokEPSS %40

    isc · bind6 Tem 2016

  • CVE-2016-4463
    34İzleyin

    Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply n

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    apache · xerces-c\+\+8 Tem 2016

  • CVE-2016-4533
    35İzleyin

    Heap-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file.

    YüksekCVSS 7,8İstismar yokEPSS %12

    wecon · levistudiou11 Tem 2016

  • CVE-2016-5781
    36İzleyin

    Stack-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file.

    YüksekCVSS 7,8İstismar yokEPSS %16

    wecon · levistudio11 Tem 2016

  • CVE-2016-6174
    36İzleyin

    applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power B

    YüksekCVSS 8,1Kavram kanıtıEPSS %12

    php · php12 Tem 2016

  • CVE-2016-3204
    41Planlayın

    The Microsoft (1) JScript 5.8 and 9 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allo

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · internet explorer12 Tem 2016

  • CVE-2016-3238
    43Planlayın

    The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201

    YüksekCVSS 8,1Kavram kanıtıEPSS %35

    microsoft · windows 1012 Tem 2016

  • CVE-2016-3240
    34İzleyin

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer12 Tem 2016

  • CVE-2016-3241
    34İzleyin

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer12 Tem 2016

  • CVE-2016-3242
    34İzleyin

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer12 Tem 2016

  • CVE-2016-3243
    34İzleyin

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer12 Tem 2016

  • CVE-2016-3244
    23İzleyin

    Microsoft Edge allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge Security Feature

    OrtaCVSS 4,3İstismar yokEPSS %18

    microsoft · edge12 Tem 2016

  • CVE-2016-3245
    30İzleyin

    Microsoft Internet Explorer 9 through 11 allows remote attackers to trick users into making TCP connections to a restricted port via a craft

    OrtaCVSS 6,5İstismar yokEPSS %14

    microsoft · internet explorer12 Tem 2016

  • CVE-2016-3246
    34İzleyin

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · edge12 Tem 2016

  • CVE-2016-3248
    42Planlayın

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft

    YüksekCVSS 8,8İstismar yokEPSS %22

    microsoft · edge12 Tem 2016

  • CVE-2016-3251
    28İzleyin

    The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,

    DüşükCVSS 2,8İstismar yokEPSS %58

    microsoft · windows 1012 Tem 2016

  • CVE-2016-3255
    37İzleyin

    Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via XML data containing

    YüksekCVSS 7,5İstismar yokEPSS %24

    microsoft · .net framework12 Tem 2016

  • CVE-2016-3259
    46Planlayın

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft

    YüksekCVSS 8,8İstismar yokEPSS %36

    microsoft · edge12 Tem 2016

  • CVE-2016-3260
    42Planlayın

    The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and

    YüksekCVSS 8,8İstismar yokEPSS %23

    microsoft · edge12 Tem 2016

  • CVE-2016-3261
    25İzleyin

    Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information via a crafted web site, aka "Internet Explorer Inform

    OrtaCVSS 5,3İstismar yokEPSS %13

    microsoft · internet explorer12 Tem 2016

  • CVE-2016-3264
    34İzleyin

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · edge12 Tem 2016

  • CVE-2016-3265
    41Planlayın

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup

    YüksekCVSS 8,8İstismar yokEPSS %20

    microsoft · edge12 Tem 2016

  • CVE-2016-3269
    41Planlayın

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup

    YüksekCVSS 8,8İstismar yokEPSS %21

    microsoft · edge12 Tem 2016

  • CVE-2016-3271
    32İzleyin

    The VBScript engine in Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, ak

    OrtaCVSS 6,5İstismar yokEPSS %20

    microsoft · edge12 Tem 2016

  • CVE-2016-3272
    24İzleyin

    The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles page-fault sys

    DüşükCVSS 2,8İstismar yokEPSS %43

    microsoft · windows 1012 Tem 2016

  • CVE-2016-3273
    25İzleyin

    The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript code, which allows remot

    OrtaCVSS 5,3İstismar yokEPSS %14

    microsoft · edge12 Tem 2016

  • CVE-2016-3277
    31İzleyin

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka

    OrtaCVSS 5,3İstismar yokEPSS %32

    microsoft · edge12 Tem 2016

  • CVE-2016-3278
    37İzleyin

    Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 allows remote attackers to execute arbitrary code via a crafted Office document,

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · outlook12 Tem 2016

  • CVE-2016-3279
    27İzleyin

    Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 201

    OrtaCVSS 5,5İstismar yokEPSS %16

    microsoft · excel12 Tem 2016

  • CVE-2016-3280
    37İzleyin

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Word 2016 for Mac, Office Compa

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · office12 Tem 2016

  • CVE-2016-3281
    37İzleyin

    Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Word Automation

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · office12 Tem 2016

  • CVE-2016-3282
    39İzleyin

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, O

    YüksekCVSS 7,8İstismar yokEPSS %26

    microsoft · office12 Tem 2016

  • CVE-2016-3283
    37İzleyin

    Microsoft Word Viewer allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corrupti

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · word viewer12 Tem 2016

  • CVE-2016-3284
    37İzleyin

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Comp

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · excel12 Tem 2016

  • CVE-2016-4175
    41Planlayın

    Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att

    YüksekCVSS 8,8Kavram kanıtıEPSS %20

    adobe · flash player desktop runtime12 Tem 2016

  • CVE-2016-4176
    40Planlayın

    Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    adobe · flash player desktop runtime12 Tem 2016

  • CVE-2016-4177
    40Planlayın

    Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    adobe · flash player desktop runtime12 Tem 2016

  • CVE-2016-4179
    41Planlayın

    Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att

    YüksekCVSS 8,8Kavram kanıtıEPSS %20

    adobe · flash player desktop runtime12 Tem 2016

  • CVE-2016-4201
    45Planlayın

    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    adobe · acrobat12 Tem 2016

  • CVE-2016-4203
    47Planlayın

    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin

    KritikCVSS 9,8Kavram kanıtıEPSS %28

    adobe · acrobat12 Tem 2016

  • CVE-2016-4204
    44Planlayın

    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    adobe · acrobat12 Tem 2016

  • CVE-2016-4205
    44Planlayın

    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    adobe · acrobat12 Tem 2016

  • CVE-2016-4206
    44Planlayın

    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    adobe · acrobat12 Tem 2016

  • CVE-2016-4207
    44Planlayın

    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    adobe · acrobat12 Tem 2016

  • CVE-2016-4208
    44Planlayın

    Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Contin

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    adobe · acrobat12 Tem 2016

  • CVE-2016-4226
    45Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before

    YüksekCVSS 8,8Kavram kanıtıEPSS %33

    adobe · flash player desktop runtime12 Tem 2016

  • CVE-2016-4227
    45Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before

    YüksekCVSS 8,8Kavram kanıtıEPSS %32

    adobe · flash player desktop runtime12 Tem 2016

  • CVE-2016-4228
    45Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before

    YüksekCVSS 8,8Kavram kanıtıEPSS %33

    adobe · flash player desktop runtime12 Tem 2016

  • CVE-2016-4229
    45Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before

    YüksekCVSS 8,8Kavram kanıtıEPSS %32

    adobe · flash player desktop runtime12 Tem 2016

  • CVE-2016-4230
    45Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before

    YüksekCVSS 8,8Kavram kanıtıEPSS %32

    adobe · flash player desktop runtime12 Tem 2016

  • CVE-2016-4231
    45Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before

    YüksekCVSS 8,8Kavram kanıtıEPSS %32

    adobe · flash player desktop runtime12 Tem 2016

  • CVE-2016-4232
    41Planlayın

    Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows att

    YüksekCVSS 7,5Kavram kanıtıEPSS %36

    adobe · flash player desktop runtime12 Tem 2016

  • CVE-2016-4372
    45Planlayın

    HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    hp · intelligent management center application performance manager15 Tem 2016

  • CVE-2016-5385
    47Planlayın

    PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from t

    YüksekCVSS 8,1İstismar yokEPSS %50

    hp · storeever msl6480 tape library firmware18 Tem 2016

  • CVE-2016-5387
    49Planlayın

    The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untru

    YüksekCVSS 8,1İstismar yokEPSS %55

    apache · http server18 Tem 2016

  • CVE-2016-5388
    47Planlayın

    Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does

    YüksekCVSS 8,1İstismar yokEPSS %50

    apache · tomcat19 Tem 2016

  • CVE-2016-2775
    42Planlayın

    ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows

    OrtaCVSS 5,9İstismar yokEPSS %63

    isc · bind19 Tem 2016

  • CVE-2016-5080
    42Planlayın

    Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent

    KritikCVSS 9,8İstismar yokEPSS %10

    objective systems · asn1c19 Tem 2016

  • CVE-2016-3510
    66Bu hafta

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote

    KritikCVSS 9,8SilahlaştırılmışEPSS %91

    oracle · weblogic server21 Tem 2016

  • CVE-2016-3521
    29İzleyin

    Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x b

    OrtaCVSS 6,5İstismar yokEPSS %10

    mariadb · mariadb21 Tem 2016

  • CVE-2016-3586
    45Planlayın

    Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    oracle · weblogic server21 Tem 2016

  • CVE-2016-4622
    41Planlayın

    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a de

    YüksekCVSS 8,8Kavram kanıtıEPSS %20

    apple · safari21 Tem 2016

  • CVE-2016-5743
    42Planlayın

    Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 th

    KritikCVSS 9,8İstismar yokEPSS %10

    siemens · simatic batch22 Tem 2016

  • CVE-2016-1608
    38İzleyin

    vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbi

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    novell · filr31 Tem 2016

  • CVE-2016-1610
    33İzleyin

    Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    novell · filr31 Tem 2016

  • CVE-2016-2180
    39İzleyin

    The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenS

    YüksekCVSS 7,5İstismar yokEPSS %29

    openssl · openssl31 Tem 2016