CVEs published October 10, 2016
108 CVEs were published on October 10, 2016: 0 critical, 0 high.
- Published
- 108
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 108
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 108
- CVE-2016-1000126Reflected XSS in wordpress plugin admin-font-editor v1.8
- CVE-2016-1000127Reflected XSS in wordpress plugin ajax-random-post v2.00
- CVE-2016-1000128Reflected XSS in wordpress plugin anti-plagiarism v3.60
- CVE-2016-1000129Reflected XSS in wordpress plugin defa-online-image-protector v3.3
- CVE-2016-1000130Reflected XSS in wordpress plugin e-search v1.0
- CVE-2016-1000131Reflected XSS in wordpress plugin e-search v1.0
- CVE-2016-1000132Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8
- CVE-2016-1000133Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1
- CVE-2016-1000134Reflected XSS in wordpress plugin hdw-tube v1.2
- CVE-2016-1000135Reflected XSS in wordpress plugin hdw-tube v1.2
- CVE-2016-1000136Reflected XSS in wordpress plugin heat-trackr v1.0
- CVE-2016-1000137Reflected XSS in wordpress plugin hero-maps-pro v2.1.0
- CVE-2016-1000138Reflected XSS in wordpress plugin indexisto v1.0.5
- CVE-2016-1000139Reflected XSS in wordpress plugin infusionsoft v1.5.11
- CVE-2016-1000140Reflected XSS in wordpress plugin new-year-firework v1.1.9
- CVE-2016-1000141Reflected XSS in wordpress plugin page-layout-builder v1.9.3
- CVE-2016-1000142Reflected XSS in wordpress plugin parsi-font v4.2.5
- CVE-2016-1000143Reflected XSS in wordpress plugin photoxhibit v2.1.8
- CVE-2016-1000144Reflected XSS in wordpress plugin photoxhibit v2.1.8
- CVE-2016-1000145Reflected XSS in wordpress plugin pondol-carousel v1.0
- CVE-2016-1000146Reflected XSS in wordpress plugin pondol-formmail v1.1
- CVE-2016-1000147Reflected XSS in wordpress plugin recipes-writer v1.0.4
- CVE-2016-1000148Reflected XSS in wordpress plugin s3-video v0.983
- CVE-2016-1000149Reflected XSS in wordpress plugin simpel-reserveren v3.5.2
- CVE-2016-1000150Reflected XSS in wordpress plugin simplified-content v1.0.0
- CVE-2016-1000151Reflected XSS in wordpress plugin tera-charts v1.0
- CVE-2016-1000152Reflected XSS in wordpress plugin tidio-form v1.0
- CVE-2016-1000153Reflected XSS in wordpress plugin tidio-gallery v1.1
- CVE-2016-1000154Reflected XSS in wordpress plugin whizz v1.0.7
- CVE-2016-1000155Reflected XSS in wordpress plugin wpsolr-search-engine v7.6
- CVE-2016-1000216Ruckus Wireless H500 web management interface authenticated command injection
- CVE-2016-5325CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.
- CVE-2016-7099The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does no
- CVE-2016-7423The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows loc
- CVE-2016-8100Intel Integrated Performance Primitives (aka IPP) Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via
- CVE-2016-8101The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via unspecified vectors.
- CVE-2015-0572Multiple race conditions in drivers/char/adsprpc.c and drivers/char/adsprpc_compat.c in the ADSPRPC driver for the Linux kernel 3.x, as used
- CVE-2015-8950arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initializ
- CVE-2015-8951Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05
- CVE-2015-8955arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of
- CVE-2015-8956The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive informati
- CVE-2016-3860sound/soc/msm/qdsp6v2/audio_calibration.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One d
- CVE-2016-3882Off-by-one error in server/wifi/anqp/VenueNameElement.java in Wi-Fi in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows remote
- CVE-2016-3900cmds/servicemanager/service_manager.c in ServiceManager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 be
- CVE-2016-3901Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus
- CVE-2016-3902drivers/platform/msm/ipa/ipa_qmi_service.c in the Qualcomm IPA driver in Android before 2016-10-05 on Nexus 5X and 6P devices allows attacke
- CVE-2016-3903drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X,
- CVE-2016-3905CORE/HDD/src/wlan_hdd_main.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileg
- CVE-2016-3908The Lock Settings Service in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to remove a device's PIN or password,
- CVE-2016-3909The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 201
- CVE-2016-3910services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and
- CVE-2016-3911core/java/android/os/Process.java in Zygote in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and
- CVE-2016-3912The framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 all
- CVE-2016-3913media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x b
- CVE-2016-3914Race condition in providers/telephony/MmsProvider.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x
- CVE-2016-3915camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-0
- CVE-2016-3916camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-0
- CVE-2016-3917The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authen
- CVE-2016-3918email/provider/AttachmentProvider.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-
- CVE-2016-3920id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-1
- CVE-2016-3921libsysutils/src/FrameworkListener.cpp in Framework Listener in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before
- CVE-2016-3922libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, which allo
- CVE-2016-3923The Accessibility services in Android 7.0 before 2016-10-01 mishandle motion events, which allows attackers to conduct touchjacking attacks
- CVE-2016-3924services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01,
- CVE-2016-3925server/wifi/anqp/ANQPFactory.java in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to cause a denial of service (
- CVE-2016-3926Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and atta
- CVE-2016-3927Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vect
- CVE-2016-3928The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal b
- CVE-2016-3929Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vect
- CVE-2016-3930The NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, ak
- CVE-2016-3931drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One
- CVE-2016-3932mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 29161895 an
- CVE-2016-3933mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka i
- CVE-2016-3934drivers/media/platform/msm/camera_v2/sensor/io/msm_camera_cci_i2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, N
- CVE-2016-3935Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus
- CVE-2016-3936The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal b
- CVE-2016-3937The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal b
- CVE-2016-3938drivers/video/msm/mdss/mdss_mdp_overlay.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Andr
- CVE-2016-3939drivers/video/msm/mdss/mdss_debug.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android On
- CVE-2016-3940The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices allows attackers to gain privileges via a
- CVE-2016-5343drivers/soc/qcom/qdsp6v2/voice_svc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (Qu
- CVE-2016-5348The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allo
- CVE-2016-6672The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted applicat
- CVE-2016-6673The NVIDIA camera driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka
- CVE-2016-6674system_server in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug
- CVE-2016-6675Off-by-one error in CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One de
- CVE-2016-6676Off-by-one error in CORE/HDD/src/wlan_hdd_cfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One device
- CVE-2016-6677The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted applica
- CVE-2016-6678The Motorola USBNet driver in Android before 2016-10-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted ap
- CVE-2016-6679CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attacke
- CVE-2016-6680CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers
- CVE-2016-6681drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One dev
- CVE-2016-6682drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One dev
- CVE-2016-6683The kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka int
- CVE-2016-6684The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attac
- CVE-2016-6685The kernel in Android before 2016-10-05 on Nexus 6P devices allows attackers to obtain sensitive information via a crafted application, aka
- CVE-2016-6686The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted applicati
- CVE-2016-6687The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted applicati
- CVE-2016-6688The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted applicati
- CVE-2016-6689Binder in the kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted applicatio
- CVE-2016-6690The sound driver in the kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Nexus Player devices allows attacke
- CVE-2016-6691service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to
- CVE-2016-6692drivers/video/msm/mdss/mdss_mdp_pp.c in the Qualcomm MDSS driver in Android before 2016-10-05 allows attackers to cause a denial of service
- CVE-2016-6693sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of s
- CVE-2016-6694sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of s
- CVE-2016-6695sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of s
- CVE-2016-6696sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of s
- CVE-2016-7117Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to exec