| | CVE-2016-9216 |  Cisco | medium | 5.3 | 0.5%
| | An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Soft… | Jan 26, 2017 | May 13, 2026 |
| | CVE-2016-5720 |  Microsoft | high | 7.8 | 1.0%
| | Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbit… | Jan 23, 2017 | May 13, 2026 |
| | CVE-2016-4055 |  Tenable | medium | 6.5 | 2.7%
| | The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cau… | Jan 23, 2017 | May 13, 2026 |
| | CVE-2016-6497 |  Apache | high | 7.5 | 3.0%
| | main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attacker… | Jan 18, 2017 | May 13, 2026 |
| | CVE-2015-3188 | Apache | critical | 9.8 | 12.4%
| | The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrar… | Jan 13, 2017 | May 13, 2026 |
| | CVE-2017-0003 | Microsoft | high | 7.8 | 33.6%
| | Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrar… | Jan 10, 2017 | May 6, 2026 |
| | CVE-2017-0002 | Microsoft | high | 8.8 | 14.7%
| | Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the ab… | Jan 10, 2017 | May 6, 2026 |
| | CVE-2016-9247 |  F5 | medium | 5.9 | 0.8%
| | Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile… | Jan 10, 2017 | May 6, 2026 |
| | CVE-2016-10126 |  Splunk | critical | 9.8 | 1.4%
| | Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x… | Jan 10, 2017 | May 6, 2026 |
| | CVE-2016-8106 |  HPE | medium | 5.9 | 2.6%
| | A Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images before… | Jan 9, 2017 | May 6, 2026 |
| | CVE-2016-9879 |  VMware | high | 7.5 | 0.3%
| | An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x befo… | Jan 6, 2017 | May 6, 2026 |
| | CVE-2017-5179 | Tenable | medium | 5.4 | 0.2%
| | Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.3 allows remote authenticated … | Jan 5, 2017 | May 6, 2026 |
| | CVE-2016-8006 |  Trellix | medium | 4.4 | 0.1%
| | Authentication bypass vulnerability in Enterprise Security Manager (ESM) and License Manager (LM) in… | Jan 5, 2017 | May 6, 2026 |
| | CVE-2016-5024 | F5 | medium | 5.9 | 1.7%
| | Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configu… | Jan 3, 2017 | May 6, 2026 |
| | CVE-2016-10097 |  ForgeRock | high | 7.5 | 0.8%
| | XML External Entity (XXE) Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access Manag… | Jan 2, 2017 | May 6, 2026 |
| | CVE-2016-9878 | VMware | high | 7.5 | 4.9%
| | An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x bef… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7462 | VMware | high | 8.5 | 1.7%
| | The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenti… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7461 | VMware | high | 8.8 | 0.1%
| | The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Worksta… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7460 | VMware | critical | 9.1 | 2.0%
| | The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize A… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7459 | VMware | high | 7.7 | 0.5%
| | VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read ar… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7458 | VMware | medium | 5.8 | 0.4%
| | VMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi instan… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7457 | VMware | critical | 10.0 | 1.5%
| | VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain pr… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7456 | VMware | critical | 9.8 | 82.1%
| | VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7087 | VMware | medium | 5.3 | 2.9%
| | Directory traversal vulnerability in the Connection Server in VMware Horizon View 5.x before 5.3.7, … | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7086 | VMware | high | 7.8 | 0.0%
| | The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7085 | VMware | high | 7.8 | 0.1%
| | Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 an… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7084 | VMware | high | 7.8 | 0.7%
| | tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7083 | VMware | high | 7.8 | 0.3%
| | VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Window… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7082 | VMware | high | 7.8 | 0.1%
| | VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Window… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7081 | VMware | high | 7.8 | 0.2%
| | Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Worksta… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7080 | VMware | high | 7.8 | 0.1%
| | The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local us… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-7079 | VMware | high | 7.8 | 0.1%
| | The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local us… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-5334 | VMware | medium | 5.3 | 0.2%
| | VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attac… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-5329 | VMware | medium | 5.5 | 0.0%
| | VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows loca… | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-5328 | VMware | medium | 5.5 | 0.0%
| | VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, … | Dec 29, 2016 | May 6, 2026 |
| | CVE-2016-9224 | Cisco | medium | 6.5 | 0.3%
| | A vulnerability in the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to … | Dec 26, 2016 | May 6, 2026 |
| | CVE-2016-9223 | Cisco | critical | 9.8 | 1.8%
| | A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator (CCO; formerly … | Dec 26, 2016 | May 6, 2026 |
| | CVE-2016-9217 | Cisco | high | 8.8 | 0.6%
| | A vulnerability in Cisco Intercloud Fabric for Business and Cisco Intercloud Fabric for Providers co… | Dec 26, 2016 | May 6, 2026 |
| | CVE-2016-7300 | Microsoft | high | 7.8 | 0.5%
| | Untrusted search path vulnerability in Microsoft Auto Updater for Mac allows local users to gain pri… | Dec 20, 2016 | May 6, 2026 |
| | CVE-2016-7298 | Microsoft | high | 7.8 | 18.9%
| | Microsoft Office 2007 SP3, Office 2010 SP2, Word Viewer, Office for Mac 2011, and Office 2016 for Ma… | Dec 20, 2016 | May 6, 2026 |
| | CVE-2016-7297 | Microsoft | high | 7.5 | 35.2%
| | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a … | Dec 20, 2016 | May 6, 2026 |
| | CVE-2016-7296 | Microsoft | high | 7.5 | 37.4%
| | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a … | Dec 20, 2016 | May 6, 2026 |
| | CVE-2016-7291 | Microsoft | high | 7.1 | 10.9%
| | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac… | Dec 20, 2016 | May 6, 2026 |
| | CVE-2016-7290 | Microsoft | high | 7.1 | 10.9%
| | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac… | Dec 20, 2016 | May 6, 2026 |
| | CVE-2016-7289 | Microsoft | high | 7.8 | 34.2%
| | Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of … | Dec 20, 2016 | May 6, 2026 |
| | CVE-2016-7288 | Microsoft | high | 7.5 | 79.3%
| | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a … | Dec 20, 2016 | May 6, 2026 |
| | CVE-2016-7287 | Microsoft | high | 7.5 | 78.3%
| | The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to… | Dec 20, 2016 | May 6, 2026 |
| | CVE-2016-7286 | Microsoft | high | 7.5 | 82.7%
| | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a … | Dec 20, 2016 | May 6, 2026 |
| | CVE-2016-7284 | Microsoft | medium | 4.3 | 24.2%
| | Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from p… | Dec 20, 2016 | May 6, 2026 |
| | CVE-2016-7283 | Microsoft | high | 8.8 | 23.0%
| | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause … | Dec 20, 2016 | May 6, 2026 |