CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2016-6277NETGEAR Routers - Remote Code Execution | NETGEAR · Multiple Routers | Exploited | 8.8 | 100% | 2016-12-14 |
| CVE-2016-10033WordPress PHPMailer < 5.2.18 - Remote Code Execution | PHP · PHPMailer | Exploited | 9.8 | 100% | 2016-12-30 |
| CVE-2016-3088Apache ActiveMQ Fileserver - Arbitrary File Write | Apache · ActiveMQ | Exploited | 9.8 | 98% | 2016-06-01 |
| CVE-2015-7450IBM WebSphere Java Object Deserialization - Remote Code Execution | IBM · WebSphere Application Server and Server Hypervisor Edition | Exploited | 9.8 | 98% | 2016-01-02 |
| CVE-2016-3714The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to exe… | ImageMagick · ImageMagick | Exploited | 8.4 | 97% | 2016-05-05 |
| CVE-2016-3081Apache S2-032 Struts - Remote Code Execution | Apache · Struts | Exploited | 8.1 | 97% | 2016-04-26 |
| CVE-2016-0752Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remot… | Rails · Ruby on Rails | Exploited | 7.5 | 96% | 2016-02-16 |
| CVE-2016-4117Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016. | Adobe · Flash Player | Exploited | 7.8 | 94% | 2016-05-11 |
| CVE-2016-0189The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code… | Microsoft · Internet Explorer | Exploited | 7.5 | 94% | 2016-05-11 |
| CVE-2016-4437Apache Shiro 1.2.4 Cookie RememberME - Deserial Remote Code Execution Vulnerability | Apache · Shiro | Exploited | 9.8 | 93% | 2016-06-07 |
| CVE-2016-3427Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and ava… | Oracle · Java SE and JRockit | Exploited | 9.8 | 92% | 2016-04-21 |
| CVE-2016-6415The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote… | Cisco · IOS, IOS XR, and IOS XE | Exploited | 7.5 | 88% | 2016-09-19 |
| CVE-2016-6366Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Modu… | Cisco · Adaptive Security Appliance (ASA) | Exploited | 8.8 | 88% | 2016-08-18 |
| CVE-2016-5195Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature… | Linux · Kernel | Exploited | 7.0 | 84% | 2016-11-10 |
| CVE-2016-7200The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… | Microsoft · Edge | Exploited | 8.8 | 83% | 2016-11-10 |
| CVE-2016-7255The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10… | Microsoft · Win32k | Exploited | 7.8 | 81% | 2016-11-10 |
| CVE-2016-7201The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… | Microsoft · Edge | Exploited | 8.8 | 80% | 2016-11-10 |
| CVE-2016-3718The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted im… | ImageMagick · ImageMagick | Exploited | 5.5 | 76% | 2016-05-05 |
| CVE-2016-3715The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. | ImageMagick · ImageMagick | Exploited | 5.5 | 75% | 2016-05-05 |
| CVE-2016-2386SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Securit… | SAP · NetWeaver | Exploited | 9.8 | 72% | 2016-02-16 |
| CVE-2016-0185Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka… | Microsoft · Windows | Exploited | 7.8 | 70% | 2016-05-11 |
| CVE-2016-0034Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (objec… | Microsoft · Silverlight | Exploited | 8.8 | 69% | 2016-01-13 |
| CVE-2016-3393Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Window… | Microsoft · Windows | Exploited | 7.8 | 68% | 2016-10-14 |
| CVE-2016-4657WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. | Apple · iOS | Exploited | 8.8 | 67% | 2016-08-25 |
| CVE-2016-7256atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8… | Microsoft · Windows | Exploited | 8.8 | 65% | 2016-11-10 |
| CVE-2016-0151The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, whi… | Microsoft · Client-Server Run-time Subsystem (CSRSS) | Exploited | 7.8 | 63% | 2016-04-12 |
| CVE-2016-7262Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to ex… | Microsoft · Excel | Exploited | 7.8 | 59% | 2016-12-20 |
| CVE-2016-7193Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automa… | Microsoft · Office | Exploited | 7.8 | 58% | 2016-10-14 |
| CVE-2016-0984Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.… | Adobe · Flash Player and AIR | Exploited | 8.8 | 55% | 2016-02-10 |
| CVE-2016-2388The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 22… | SAP · NetWeaver | Exploited | 5.3 | 52% | 2016-02-16 |
| CVE-2016-1646The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows r… | Google · Chromium V8 | Exploited | 8.8 | 48% | 2016-03-29 |
| CVE-2016-3976Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the fileName parameter… | SAP · NetWeaver | Exploited | 7.5 | 47% | 2016-04-07 |
| CVE-2016-3235Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain priv… | Microsoft · Office | Exploited | 7.8 | 43% | 2016-06-16 |
| CVE-2016-0099The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Wi… | Microsoft · Windows | Exploited | 7.8 | 37% | 2016-03-09 |
| CVE-2016-4655The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. | Apple · iOS | Exploited | 5.5 | 33% | 2016-08-25 |
| CVE-2016-3298Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to deter… | Microsoft · Internet Explorer | Exploited | 6.5 | 33% | 2016-10-14 |
| CVE-2016-4523The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application cras… | Trihedral · VTScada (formerly VTS) | Exploited | 7.5 | 31% | 2016-06-09 |
| CVE-2016-3351Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Discl… | Microsoft · Internet Explorer and Edge | Exploited | 6.5 | 26% | 2016-09-14 |
| CVE-2016-7855Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via uns… | Adobe · Flash Player | Exploited | 8.8 | 25% | 2016-11-01 |
| CVE-2016-0040The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elev… | Microsoft · Windows | Exploited | 7.8 | 24% | 2016-02-10 |
| CVE-2016-9563BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwl… | SAP · NetWeaver | Exploited | 6.5 | 24% | 2016-11-23 |
| CVE-2016-4656The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. | Apple · iOS | Exploited | 7.8 | 24% | 2016-08-25 |
| CVE-2016-6367Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka B… | Cisco · Adaptive Security Appliance (ASA) | Exploited | 7.8 | 23% | 2016-08-18 |
| CVE-2016-1019Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as e… | Adobe · Flash Player | Exploited | 7.8 | 22% | 2016-04-07 |
| CVE-2016-0162Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vul… | Microsoft · Internet Explorer | Exploited | 4.3 | 22% | 2016-04-12 |
| CVE-2016-3309The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Window… | Microsoft · Windows | Exploited | 7.8 | 20% | 2016-08-09 |
| CVE-2016-4171Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016. | Adobe · Flash Player | Exploited | 7.8 | 20% | 2016-06-16 |
| CVE-2016-1010Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,… | Adobe · Flash Player and AIR | Exploited | 8.8 | 19% | 2016-03-12 |
| CVE-2016-7892Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could… | Adobe · Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier | Exploited | 8.8 | 19% | 2016-12-15 |
| CVE-2010-5326The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary co… | SAP · NetWeaver | Exploited | 10.0 | 18% | 2016-05-13 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.