Microsoft Windows 访问控制错误漏洞

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. The Microsoft Windows RPC API contains a vulnerability related to access control errors. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are...

KB5082198: Windows 10 Version 1607 / Windows Server 2016 Security Update (April 2026)

The remote Windows host is missing security update 5082198. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...

CVE-2016-20043

creationtimestamp| type| source ---|---|--- 2026-04-11 02:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj6quhavbs2o...

CVE-2016-5725 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2016-20054 Nodcms Cross Site Request Forgery via admin endpoints

Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms. Attackers can trick authenticated administrators into submitting requests to admin/usermanipulate and admin/settings/generall endpoints to...

CVE-2016-20054

CVE-2016-20054 concerns Nodcms and a cross-site request forgery (CSRF) vulnerability that enables unauthorized administrative actions via crafted forms. The issue allows tricking authenticated administrators into submitting requests to admin/user_manipulate and admin/settings/generall endpoints t...

CVE-2016-20057

creationtimestamp| type| source ---|---|--- 2026-04-04 15:25:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miok6wq2i52i...

CVE-2016-20059

creationtimestamp| type| source ---|---|--- 2026-04-04 15:20:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miojvyazpo23...

CVE-2016-20061

creationtimestamp| type| source ---|---|--- 2026-04-04 15:09:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miojc6dxue2s...

CVE-2016-20060

creationtimestamp| type| source ---|---|--- 2026-04-04 14:49:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mioi7exnfp2s...

CVE-2016-20056

creationtimestamp| type| source ---|---|--- 2026-04-04 14:45:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miohynzb5p2i...

CVE-2016-20059

IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the...

CVE-2016-20055

IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts...

CVE-2016-20060

Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables. Attackers can place executable files in the service path and upon service restart or system reboot, the malicious...

CVE-2016-20057 NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation

NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart ...

CVE-2016-20055 IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation

IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts...

CVE-2016-20052

Snews CMS 1.7 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files including PHP executables to the snewsfiles directory. Attackers can upload malicious PHP files through the multipart form-data upload endpoint and execute them by...

CVE-2016-15058

creationtimestamp| type| source ---|---|--- 2026-04-03 23:25:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimulfblib2t 2026-04-04 01:30:17+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3min3k5xk2c2q...

CVE-2016-15058

Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted in plaintext when the feature is...

CVE-2016-20045

creationtimestamp| type| source ---|---|--- 2026-03-28 14:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4ule4jn72j 2026-04-09 00:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mizjxe2zol2d...