2016 CVE Vulnerabilities
10,647 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-9757 | — | — | 0.6% | Dec 20, 2016 | In the Create Tags page of the Rapid7 Nexpose version 6.4.12 user interface, any authenticated user who has the capabili... |
| CVE-2016-5303 | — | — | 1.5% | Dec 20, 2016 | Cross-site scripting (XSS) vulnerability in the Horde Text Filter API in Horde Groupware and Horde Groupware Webmail Edi... |
| CVE-2016-4552 | — | — | 1.4% | Dec 20, 2016 | Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary w... |
| CVE-2016-7300 | — | — | 1.8% | Dec 20, 2016 | Untrusted search path vulnerability in Microsoft Auto Updater for Mac allows local users to gain privileges via a Trojan... |
| CVE-2016-7298 | — | — | 22.6% | Dec 20, 2016 | Microsoft Office 2007 SP3, Office 2010 SP2, Word Viewer, Office for Mac 2011, and Office 2016 for Mac allow remote attac... |
| CVE-2016-7297 | — | — | 25.1% | Dec 20, 2016 | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m... |
| CVE-2016-7296 | — | — | 16.6% | Dec 20, 2016 | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m... |
| CVE-2016-7295 | — | — | 2.7% | Dec 20, 2016 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 S... |
| CVE-2016-7292 | — | — | 1.5% | Dec 20, 2016 | The Installer in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se... |
| CVE-2016-7291 | — | — | 22.8% | Dec 20, 2016 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automati... |
| CVE-2016-7290 | — | — | 22.8% | Dec 20, 2016 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automati... |
| CVE-2016-7289 | — | — | 25.1% | Dec 20, 2016 | Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr... |
| CVE-2016-7288 | — | — | 70.4% | Dec 20, 2016 | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m... |
| CVE-2016-7287 | — | — | 68.7% | Dec 20, 2016 | The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary c... |
| CVE-2016-7286 | — | — | 68.7% | Dec 20, 2016 | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m... |
| CVE-2016-7284 | — | — | 15.0% | Dec 20, 2016 | Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a ... |
| CVE-2016-7283 | — | — | 17.8% | Dec 20, 2016 | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service ... |
| CVE-2016-7282 | — | — | 8.9% | Dec 20, 2016 | Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote at... |
| CVE-2016-7281 | — | — | 12.5% | Dec 20, 2016 | The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to by... |
| CVE-2016-7280 | — | — | 8.5% | Dec 20, 2016 | Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTM... |
| CVE-2016-7279 | — | — | 14.8% | Dec 20, 2016 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a ... |
| CVE-2016-7278 | — | — | 14.7% | Dec 20, 2016 | Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via... |
| CVE-2016-7277 | — | — | 18.0% | Dec 20, 2016 | Microsoft Office 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)... |
| CVE-2016-7276 | — | — | 25.1% | Dec 20, 2016 | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote a... |
| CVE-2016-7275 | — | — | 1.4% | Dec 20, 2016 | Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which allows local users to gain ... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now