CVE-2016-2357

Milesight IP security cameras through 2016-11-14 have a hardcoded SSL private key under the /etc/config directory...

CVE-2016-2359

Milesight IP security cameras through 2016-11-14 allow remote attackers to bypass authentication and access a protected resource by simultaneously making a request for the unprotected vb.htm resource...

CVE-2016-2360

Milesight IP security cameras through 2016-11-14 have a default root password in /etc/shadow that is the same across different customers' installations...

CVE-2017-18693

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 software. There is a buffer overflow in the fps sysfs entry. The Samsung ID is SVE-2016-7510 January 2017...

CVE-2016-16113

creationtimestamp| type| source ---|---|--- 2026-01-07 23:00:13+00:00| published-proof-of-concept| Telegram/h5P8bfRy51cnS-yezftJbVpEO2Om2ofhpc-g7kq6JaOtWVE 2026-01-08 03:00:07+00:00| published-proof-of-concept| Telegram/Z6KDFyAddhRWTTdj8KLR9BqWCW4LVkYFOJnFavxpUnMZmU...

Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.15.0 shipped with IBM Cloud Pak for Business Automation iFixes for December 2025.

Summary IBM Cloud Pak for Business Automation includes IBM Cloud Pak foundational services. IBM Cloud Pak for Business Automation December 2025 security fixes update this dependency beyond 4.15.0 to address security vulnerabilities. Vulnerability Details CVEID:CVE-2016-10540 DESCRIPTION: Minimatc...

CVE-2024-2016

A vulnerability, which was classified as critical, was found in ZhiCms 4.0. Affected is the function index of the file app/manage/controller/setcontroller.php. The manipulation of the argument sitename leads to code injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2016-10735 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2016-10735 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

CVE-2016-7153 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-0625

Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an unauthenticated attacker to access DNS configuration functionality. By directly requesting this endpoint, an attacker can modify the device’s DN...

CVE-2016-15041

creationtimestamp| type| source ---|---|--- 2025-12-25 15:00:09+00:00| published-proof-of-concept| Telegram/e90wm-Cd0MPb5Hz0aUE9n9V0503j8Gy5PiBS4JuQvqOl5Lo 2026-01-12 21:02:58+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mcawtlb2ab2t...

Exploit for Cross-site Scripting in Mainwp Mainwp_Dashboard

CVE-2016-15041 Lab - MainWP Dashboard Stored XSS Vulnerable l...

December 18, 2025—KB5074974 (OS Build 14393.8692) Out-of-band

None None...

Mozilla Firefox < 48.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 48.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2016-83 advisory. - bypass FireFox Secure Connection Failed prompt to whitelist any site but doesn't workCVE-2016-5268 CVE-2016-5268 Note...

Welcome to the new Project Zero Blog

Posted by Natalie Silvanovich While on Project Zero, we aim for our research to be leading-edge, our blog design was … not so much. We welcome readers to our shiny new blog! For the occasion, we asked members of Project Zero to dust off old blog posts that never quite saw the light of day. And...

DoS (Denial of Server) org.apache.struts:struts-core Dependency in Jira Software Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2016-1182 was introduced in 11.2.0 of Jira Software Data Center and Server. This vulnerability with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H allows an unauthenticated attacker to take...

Microsoft Office 2016 Multiple RCE Vulnerabilities (KB5002819)

This host is missing an important security update according to Microsoft KB5002819. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Word 2016 Multiple RCE Vulnerabilities (KB5002806)

This host is missing an important security update according to Microsoft KB5002806. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Dec 2025)

This host is missing a critical security update according to Microsoft Office Click-to-Run update December 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...