2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-20104 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthe... |
| CVE-2016-20103 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers t... |
| CVE-2016-20102 | MEDIUM | 6.1 | 0.2% | Oct 20, 2026 | JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers t... |
| CVE-2016-20101 | HIGH | 8.1 | 0.4% | Oct 20, 2026 | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated at... |
| CVE-2016-20100 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthen... |
| CVE-2016-15060 | HIGH | 8.3 | 0.5% | Oct 14, 2026 | A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Comman... |
| CVE-2016-20099 | MEDIUM | 5.5 | 0.2% | Oct 14, 2026 | L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows... |
| CVE-2016-20098 | MEDIUM | 5.4 | — | Oct 9, 2026 | Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting vulnerability in the r... |
| CVE-2016-15059 | CRITICAL | 9.8 | 0.2% | Sep 22, 2026 | Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buff... |
| CVE-2016-20097 | HIGH | 7.5 | 0.6% | Aug 11, 2026 | Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthe... |
| CVE-2016-20096 | CRITICAL | 9.8 | 0.4% | Jul 21, 2026 | Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows r... |
| CVE-2016-20095 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | Matrix42 Remote Control Host 3.20.0031 contains an unquoted service path vulnerability in the FastViewerRemoteService an... |
| CVE-2016-20094 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYS... |
| CVE-2016-20093 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssistant and... |
| CVE-2016-20092 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | NetDrive 2.6.12 contains an unquoted service path vulnerability in the Netdrive2_Service_Netdrive2 service that allows l... |
| CVE-2016-20091 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | Windows Firewall Control 4.8.6.0 contains an unquoted service path vulnerability that allows local attackers to escalate... |
| CVE-2016-20090 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater serv... |
| CVE-2016-20089 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code w... |
| CVE-2016-20088 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that... |
| CVE-2016-20087 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | Fortitude HTTP 1.0.4.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code... |
| CVE-2016-20086 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackup_webServer servi... |
| CVE-2016-20085 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attack... |
| CVE-2016-20084 | HIGH | 7.2 | 0.2% | Jun 15, 2026 | WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthen... |
| CVE-2016-20083 | MEDIUM | 6.9 | 0.1% | Jun 15, 2026 | WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform un... |
| CVE-2016-20082 | MEDIUM | 6.9 | 0.3% | Jun 15, 2026 | WordPress Plugin Abtest contains a local file inclusion vulnerability that allows unauthenticated attackers to include a... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now