LiveActive security incident?Get immediate response

CVE archive

October 2016

Browse CVE records published in October 2016, with severity, affected products, CWE, KEV, and source-backed vulnerability context.

Search all CVEs Known exploited

Showing 50 of 706 matching CVEs · Page 5 of 15.

Unknown · CVSS Not scored

CVE-2016-1000140: Reflected XSS in wordpress plugin new-year-firework v1.1.9

Reflected XSS in wordpress plugin new-year-firework v1.1.9

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000149: Reflected XSS in wordpress plugin simpel-reserveren v3.5.2

Reflected XSS in wordpress plugin simpel-reserveren v3.5.2

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000134: Reflected XSS in wordpress plugin hdw-tube v1.2

Reflected XSS in wordpress plugin hdw-tube v1.2

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000155: Reflected XSS in wordpress plugin wpsolr-search-engine v7.6

Reflected XSS in wordpress plugin wpsolr-search-engine v7.6

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000154: Reflected XSS in wordpress plugin whizz v1.0.7

Reflected XSS in wordpress plugin whizz v1.0.7

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000215: Ruckus Wireless H500 web management interface denial of service

Ruckus Wireless H500 web management interface denial of service

Published Oct 25, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000151: Reflected XSS in wordpress plugin tera-charts v1.0

Reflected XSS in wordpress plugin tera-charts v1.0

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000137: Reflected XSS in wordpress plugin hero-maps-pro v2.1.0

Reflected XSS in wordpress plugin hero-maps-pro v2.1.0

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000138: Reflected XSS in wordpress plugin indexisto v1.0.5

Reflected XSS in wordpress plugin indexisto v1.0.5

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000136: Reflected XSS in wordpress plugin heat-trackr v1.0

Reflected XSS in wordpress plugin heat-trackr v1.0

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000148: Reflected XSS in wordpress plugin s3-video v0.983

Reflected XSS in wordpress plugin s3-video v0.983

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000150: Reflected XSS in wordpress plugin simplified-content v1.0.0

Reflected XSS in wordpress plugin simplified-content v1.0.0

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000130: Reflected XSS in wordpress plugin e-search v1.0

Reflected XSS in wordpress plugin e-search v1.0

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000143: Reflected XSS in wordpress plugin photoxhibit v2.1.8

Reflected XSS in wordpress plugin photoxhibit v2.1.8

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000139: Reflected XSS in wordpress plugin infusionsoft v1.5.11

Reflected XSS in wordpress plugin infusionsoft v1.5.11

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000132: Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8

Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000135: Reflected XSS in wordpress plugin hdw-tube v1.2

Reflected XSS in wordpress plugin hdw-tube v1.2

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000123: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla

Published Oct 6, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000131: Reflected XSS in wordpress plugin e-search v1.0

Reflected XSS in wordpress plugin e-search v1.0

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000217: Zotpress plugin for WordPress SQLi in zp_get_account()

Zotpress plugin for WordPress SQLi in zp_get_account()

Published Oct 6, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000133: Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000125: Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla

Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla

Published Oct 6, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000145: Reflected XSS in wordpress plugin pondol-carousel v1.0

Reflected XSS in wordpress plugin pondol-carousel v1.0

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000142: Reflected XSS in wordpress plugin parsi-font v4.2.5

Reflected XSS in wordpress plugin parsi-font v4.2.5

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000128: Reflected XSS in wordpress plugin anti-plagiarism v3.60

Reflected XSS in wordpress plugin anti-plagiarism v3.60

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000141: Reflected XSS in wordpress plugin page-layout-builder v1.9.3

Reflected XSS in wordpress plugin page-layout-builder v1.9.3

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000117: XSS & SQLi in HugeIT slideshow v1.0.4

XSS & SQLi in HugeIT slideshow v1.0.4

Published Oct 21, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000126: Reflected XSS in wordpress plugin admin-font-editor v1.8

Reflected XSS in wordpress plugin admin-font-editor v1.8

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000121: XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension

Published Oct 27, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000113: XSS and SQLi in huge IT gallery v1.1.5 for Joomla

XSS and SQLi in huge IT gallery v1.1.5 for Joomla

Published Oct 6, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000129: Reflected XSS in wordpress plugin defa-online-image-protector v3.3

Reflected XSS in wordpress plugin defa-online-image-protector v3.3

Published Oct 10, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000124: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6

Published Oct 6, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000118: XSS & SQLi in HugeIT slideshow v1.0.4

XSS & SQLi in HugeIT slideshow v1.0.4

Published Oct 21, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000120: SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

Published Oct 27, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000122: XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension

XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension

Published Oct 27, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000112: Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin

Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin

Published Oct 6, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000119: SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

Published Oct 21, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000114: XSS in huge IT gallery v1.1.5 for Joomla

XSS in huge IT gallery v1.1.5 for Joomla

Published Oct 6, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000115: Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS

Published Oct 21, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000003: Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code.

Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code.

Published Oct 7, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000032: TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use...

TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times.

Published Oct 25, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000000: Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection

Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection

Published Oct 6, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000007: Pagure 2.2.1 XSS in raw file endpoint

Pagure 2.2.1 XSS in raw file endpoint

Published Oct 7, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000031: Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution

Published Oct 25, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000033: Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation f...

Shotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks.

Published Oct 25, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000001: flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect

flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect

Published Oct 7, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-1000009: TP-LINK lost control of two domains, www.tplinklogin.net and tplinkextender.net.

TP-LINK lost control of two domains, www.tplinklogin.net and tplinkextender.net. Please note that these domains are physically printed on many of the devices.

Published Oct 6, 2016 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-11016: NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS.

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS.

Published Oct 16, 2019 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-11015: NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X_TWSZ-CO...

NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL parameter.

Published Oct 16, 2019 · Updated Aug 6, 2024

Unknown · CVSS Not scored

CVE-2016-11014: NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cook...

NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case.

Published Oct 16, 2019 · Updated Aug 6, 2024