Export limit exceeded: 372692 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (372692 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2016-1000147 | 1 Recipes-writer Project | 1 Recipes-writer | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin recipes-writer v1.0.4 | ||||
| CVE-2016-1000148 | 1 S3-video Project | 1 S3-video | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin s3-video v0.983 | ||||
| CVE-2016-1000149 | 1 Simpel-reserveren Project | 1 Simpel-reserveren | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin simpel-reserveren v3.5.2 | ||||
| CVE-2016-1000150 | 1 Oxil | 1 Simplified-content | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin simplified-content v1.0.0 | ||||
| CVE-2016-1000151 | 1 Tera-charts Project | 1 Tera-charts | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin tera-charts v1.0 | ||||
| CVE-2016-1000152 | 1 Tidio-form Project | 1 Tidio-form | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin tidio-form v1.0 | ||||
| CVE-2016-1000153 | 1 Tidio-gallery Project | 1 Tidio-gallery | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin tidio-gallery v1.1 | ||||
| CVE-2016-1000154 | 1 Browserweb | 1 Whizz | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin whizz v1.0.7 | ||||
| CVE-2016-1000155 | 1 Wpsolr | 1 Wpsolr-search-engine | 2025-04-12 | N/A |
| Reflected XSS in wordpress plugin wpsolr-search-engine v7.6 | ||||
| CVE-2016-1000156 | 1 Mailcwp Project | 1 Mailcwp | 2025-04-12 | N/A |
| Mailcwp remote file upload vulnerability incomplete fix v1.100 | ||||
| CVE-2016-1000213 | 1 Ruckus | 1 Wireless H500 | 2025-04-12 | N/A |
| Ruckus Wireless H500 web management interface CSRF | ||||
| CVE-2016-1000214 | 1 Ruckus | 1 Wireless H500 | 2025-04-12 | N/A |
| Ruckus Wireless H500 web management interface authentication bypass | ||||
| CVE-2016-1000215 | 1 Ruckus | 1 Wireless H500 | 2025-04-12 | N/A |
| Ruckus Wireless H500 web management interface denial of service | ||||
| CVE-2016-1000216 | 1 Ruckus | 1 Wireless H500 | 2025-04-12 | N/A |
| Ruckus Wireless H500 web management interface authenticated command injection | ||||
| CVE-2016-1000217 | 1 Zotpress Project | 1 Zotpress | 2025-04-12 | N/A |
| Zotpress plugin for WordPress SQLi in zp_get_account() | ||||
| CVE-2016-10005 | 1 Sap | 1 Solution Manager | 2025-04-12 | N/A |
| Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/caf~eu~gp~example~timeoff~wd requests, aka SAP Security Note 2344524. | ||||
| CVE-2016-10006 | 1 Antisamy Project | 1 Antisamy | 2025-04-12 | 6.1 Medium |
| In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS. | ||||
| CVE-2016-1001 | 7 Adobe, Apple, Google and 4 more | 16 Air, Air Desktop Runtime, Air Sdk and 13 more | 2025-04-12 | 8.8 High |
| Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors. | ||||
| CVE-2016-1002 | 7 Adobe, Apple, Google and 4 more | 16 Air, Air Desktop Runtime, Air Sdk and 13 more | 2025-04-12 | 8.8 High |
| Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, and CVE-2016-1005. | ||||
| CVE-2016-10031 | 1 Wampserver | 1 Wampserver | 2025-04-12 | N/A |
| WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local attacker must insert an executable file called mysqld.exe or httpd.exe and replace the original files. The next time the service starts, the malicious file will get executed as SYSTEM. NOTE: the vendor disputes the relevance of this report, taking the position that a configuration in which "'someone' (an attacker) is able to replace files on a PC" is not "the fault of WampServer. | ||||