cvelist/CVEDB huggingface dataset:
CVE-2016-0800
Published: 2016-03-01
CVSS score: 0.0
Source: Metasploit

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.
CVE-2016-0854
Published: 2016-01-15
CVSS score: 0.0
Source: Metasploit

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors.
CVE-2016-0957
Published: 2016-02-10
CVSS score: 0.0
Source: Nuclei

Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors.
CVE-2016-0984
Published: 2016-02-10
CVSS score: 8.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CISA

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.
CVE-2016-1000126
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin admin-font-editor v1.8
CVE-2016-1000127
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin ajax-random-post v2.00
CVE-2016-1000128
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin anti-plagiarism v3.60
CVE-2016-1000129
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin defa-online-image-protector v3.3
CVE-2016-1000130
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin e-search v1.0
CVE-2016-1000131
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin e-search v1.0
CVE-2016-1000132
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8
CVE-2016-1000133
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1
CVE-2016-1000134
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin hdw-tube v1.2
CVE-2016-1000135
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin hdw-tube v1.2
CVE-2016-1000136
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin heat-trackr v1.0
CVE-2016-1000137
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin hero-maps-pro v2.1.0
CVE-2016-1000138
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin indexisto v1.0.5
CVE-2016-1000139
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin infusionsoft v1.5.11
CVE-2016-1000140
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin new-year-firework v1.1.9
CVE-2016-1000141
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin page-layout-builder v1.9.3
CVE-2016-1000142
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin parsi-font v4.2.5
CVE-2016-1000143
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin photoxhibit v2.1.8
CVE-2016-1000146
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin pondol-formmail v1.1
CVE-2016-1000148
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin s3-video v0.983
CVE-2016-1000149
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin simpel-reserveren v3.5.2
CVE-2016-1000152
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin tidio-form v1.0
CVE-2016-1000153
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin tidio-gallery v1.1
CVE-2016-1000154
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin whizz v1.0.7
CVE-2016-1000155
Published: 2016-10-10
CVSS score: 0.0
Source: Nuclei

Reflected XSS in wordpress plugin wpsolr-search-engine v7.6
CVE-2016-1000282
Published: 2019-02-05
CVSS score: 0.0
Source: Metasploit

Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.
CVE-2016-10033
Published: 2016-12-30
CVSS score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: Metasploit/Nuclei/CISA

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.
CVE-2016-10045
Published: 2016-12-30
CVSS score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: Metasploit

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the mail function in PHP. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-10033.
CVE-2016-10073
Published: 2017-05-23
CVSS score: 0.0
Source: Metasploit

The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and potentially obtain sensitive information via a crafted HTTP Host header, as demonstrated by a password reset request.
CVE-2016-1010
Published: 2016-03-12
CVSS score: 8.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CISA

Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.
CVE-2016-10108
Published: 2017-01-03
CVSS score: 0.0
Source: Metasploit/Nuclei

Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.
CVE-2016-10134
Published: 2017-02-17
CVSS score: 0.0
Source: Metasploit/Nuclei

SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php.
CVE-2016-10174
Published: 2017-01-30
CVSS score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: Metasploit/CISA

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.
CVE-2016-10175
Published: 2017-01-30
CVSS score: 0.0
Source: Metasploit

The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain the administrator username and password, when used in combination with the CVE-2016-10176 vulnerability that allows resetting the answers to the password-recovery questions.
CVE-2016-10176
Published: 2017-01-30
CVSS score: 0.0
Source: Metasploit

The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server (uhttpd) and processed accordingly. The web server also contains another URL, apply_noauth.cgi, that allows an unauthenticated user to perform sensitive actions on the device. This functionality can be exploited to change the router settings (such as the answers to the password-recovery questions) and achieve remote code execution.
CVE-2016-1019
Published: 2016-04-07
CVSS score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CISA

Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.
CVE-2016-10225
Published: 2017-03-27
CVSS score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: Metasploit

The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to /proc/sunxi_debug/sunxi_debug.
CVE-2016-10367
Published: 2017-05-03
CVSS score: 0.0
Source: Nuclei

In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch), an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request utilizing a simple URL encoding bypass, %252f instead of /.
CVE-2016-10368
Published: 2017-05-03
CVSS score: 0.0
Source: Nuclei

Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the /login URI.
CVE-2016-10372
Published: 2017-05-16
CVSS score: 0.0
Source: Metasploit

The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port 7547, as demonstrated by opening WAN access to TCP port 80, retrieving the login password (which defaults to the Wi-Fi password), and using the NewNTPServer feature.
CVE-2016-10709
Published: 2018-01-22
CVSS score: 0.0
Source: Metasploit

pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php graph parameter, related to _rrd_graph_img.php.
CVE-2016-10924
Published: 2019-08-22
CVSS score: 0.0
Source: Nuclei

The ebook-download plugin before 1.2 for WordPress has directory traversal.
CVE-2016-10940
Published: 2019-09-13
CVSS score: 7.2
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: Nuclei

The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.
CVE-2016-10956
Published: 2019-09-16
CVSS score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: Nuclei

The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php.
CVE-2016-10960
Published: 2019-09-16
CVSS score: 8.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: Nuclei

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter.
CVE-2016-10972
Published: 2019-09-16
CVSS score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: Nuclei

The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.
CVE-2016-10973
Published: 2019-09-16
CVSS score: 6.1
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Source: Nuclei

The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php.
CVE-2016-10976
Published: 2019-09-17
CVSS score: 6.1
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Source: Nuclei

The safe-editor plugin before 1.2 for WordPress has no se_save authentication, with resultant XSS.
CVE-2016-10993
Published: 2019-09-17
CVSS score: 5.4
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Source: Nuclei

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter.
CVE-2016-11021
Published: 2020-03-09
CVSS score: 7.2
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CISA

setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter.
CVE-2016-1209
Published: 2016-05-14
CVSS score: 0.0
Source: Metasploit

The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request.
CVE-2016-1240
Published: 2016-10-03
CVSS score: 0.0
Source: Metasploit

The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages before 6.0.35-1ubuntu3.8 on Ubuntu 12.04 LTS, the tomcat7 and libtomcat7-java packages before 7.0.52-1ubuntu0.7 on Ubuntu 14.04 LTS, and tomcat8 and libtomcat8-java packages before 8.0.32-1ubuntu1.2 on Ubuntu 16.04 LTS allows local users with access to the tomcat account to gain root privileges via a symlink attack on the Catalina log file, as demonstrated by /var/log/tomcat7/catalina.out.
CVE-2016-15042
Published: 2024-10-16
CVSS score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: Nuclei

The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
CVE-2016-1524
Published: 2016-02-13
CVSS score: 0.0
Source: Metasploit

Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileUpload.do or (2) lib-1.0/external/flash/fileUpload.do to upload a JSP file, and then accessing it via a direct request for a /null URI.
CVE-2016-1525
Published: 2016-02-13
CVSS score: 0.0
Source: Metasploit

Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. (dot dot) in the realName parameter.
CVE-2016-1531
Published: 2016-04-07
CVSS score: 0.0
Source: Metasploit

Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
CVE-2016-1542
Published: 2016-06-13
CVSS score: 0.0
Source: Metasploit

The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure.
CVE-2016-1543
Published: 2016-06-13
CVSS score: 0.0
Source: Metasploit

The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure.
CVE-2016-1555
Published: 2017-04-21
CVSS score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: Metasploit/Nuclei/CISA

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
CVE-2016-1560
Published: 2017-04-21
CVSS score: 0.0
Source: Metasploit

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.
CVE-2016-1561
Published: 2017-04-21
CVSS score: 0.0
Source: Metasploit

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image.
CVE-2016-1593
Published: 2016-04-22
CVSS score: 0.0
Source: Metasploit

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. (dot dot) in a filename within a multipart/form-data POST request to a LiveTime.woa URL.
CVE-2016-1646
Published: 2016-03-29
CVSS score: 8.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CISA

The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.
CVE-2016-1713
Published: 2017-04-14
CVSS score: 0.0
Source: Metasploit

Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.4.0 allows remote authenticated users to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in test/logo/.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6000.
CVE-2016-1909
Published: 2016-01-15
CVSS score: 0.0
Source: Metasploit

Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.x before 4.1.11, 4.2.x before 4.2.16, 4.3.x before 4.3.17 and 5.0.x before 5.0.8 have a hardcoded passphrase for the Fortimanager_Access account, which allows remote attackers to obtain administrative access via an SSH session.
CVE-2016-20017
Published: 2022-10-19
CVSS score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CISA

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022.
CVE-2016-2004
Published: 2016-04-21
CVSS score: 0.0
Source: Metasploit/Nuclei

HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.
CVE-2016-2055
Published: 2016-04-13
CVSS score: 0.0
Source: Metasploit

xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config" command.
CVE-2016-2056
Published: 2016-04-13
CVSS score: 0.0
Source: Metasploit

xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c.
CVE-2016-2098
Published: 2016-04-07
CVSS score: 0.0
Source: Metasploit

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
CVE-2016-2203
Published: 2016-04-22
CVSS score: 0.0
Source: Metasploit

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.
CVE-2016-2296
Published: 2016-05-14
CVSS score: 0.0
Source: Metasploit

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
CVE-2016-2298
Published: 2016-05-14
CVSS score: 0.0
Source: Metasploit

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext information via unspecified vectors.
CVE-2016-2386
Published: 2016-02-16
CVSS score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CISA

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2101079.
CVE-2016-2388
Published: 2016-02-16
CVSS score: 5.3
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CISA

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.
CVE-2016-2389
Published: 2016-02-16
CVSS score: 0.0
Source: Nuclei

Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the Path parameter to /Catalog, aka SAP Security Note 2230978.
CVE-2016-2555
Published: 2017-04-13
CVSS score: 0.0
Source: Metasploit

SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriends function to friends.inc.php.
CVE-2016-2776
Published: 2016-09-28
CVSS score: 0.0
Source: Metasploit

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
CVE-2016-3081
Published: 2016-04-26
CVSS score: 0.0
Source: Metasploit/Nuclei

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
CVE-2016-3087
Published: 2016-06-07
CVSS score: 0.0
Source: Metasploit

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via vectors related to an ! (exclamation mark) operator to the REST Plugin.
CVE-2016-3088
Published: 2016-06-01
CVSS score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: Metasploit/Nuclei/CISA

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
CVE-2016-3213
Published: 2016-06-16
CVSS score: 0.0
Source: Metasploit

The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 9 through 11 has an improper fallback mechanism, which allows remote attackers to gain privileges via NetBIOS name responses, aka "WPAD Elevation of Privilege Vulnerability."
CVE-2016-3225
Published: 2016-06-16
CVSS score: 0.0
Source: Metasploit

The SMB server component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application that forwards an authentication request to an unintended service, aka "Windows SMB Server Elevation of Privilege Vulnerability."