2016 CVE Vulnerabilities

10,656 CVEs published in 2016.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2016-20104HIGH7.5EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthe...
CVE-2016-20103HIGH7.5Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers t...
CVE-2016-20101HIGH8.1Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated at...
CVE-2016-20100HIGH7.5Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthen...
CVE-2016-15060HIGH8.3A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Comman...
CVE-2016-20097HIGH7.5Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthe...
CVE-2016-20095HIGH7.8Matrix42 Remote Control Host 3.20.0031 contains an unquoted service path vulnerability in the FastViewerRemoteService an...
CVE-2016-20094HIGH7.8AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYS...
CVE-2016-20093HIGH7.8Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssistant and...
CVE-2016-20092HIGH7.8NetDrive 2.6.12 contains an unquoted service path vulnerability in the Netdrive2_Service_Netdrive2 service that allows l...
CVE-2016-20091HIGH7.8Windows Firewall Control 4.8.6.0 contains an unquoted service path vulnerability that allows local attackers to escalate...
CVE-2016-20090HIGH7.8Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater serv...
CVE-2016-20089HIGH7.8Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code w...
CVE-2016-20088HIGH7.8Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that...
CVE-2016-20087HIGH7.8Fortitude HTTP 1.0.4.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code...
CVE-2016-20086HIGH7.8Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackup_webServer servi...
CVE-2016-20085HIGH7.8Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attack...
CVE-2016-20084HIGH7.2WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthen...
CVE-2016-20081HIGH8.7WordPress Plugin HB Audio Gallery Lite 1.0.0 contains a path traversal vulnerability that allows unauthenticated attacke...
CVE-2016-20076HIGH8.7WordPress Simple-Backup 2.7.11 contains multiple vulnerabilities that allow unauthenticated attackers to delete arbitrar...
CVE-2016-20075HIGH8.8WordPress Ultimate Product Catalog 3.8.6 contains an arbitrary file upload vulnerability that allows authenticated users...
CVE-2016-20073HIGH8.8Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attacker...
CVE-2016-20072HIGH8.8BBS e-Franchise 1.1.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers...
CVE-2016-20071HIGH8.8The 404 Redirection Manager plugin version 1.0 for WordPress contains an unauthenticated SQL injection vulnerability tha...
CVE-2016-20069HIGH8.8WordPress Booking Calendar Contact Form 1.0.23 contains an unauthenticated blind SQL injection vulnerability in the shor...

Check if your code is affected by 2016 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now