2016 CVE Vulnerabilities
10,647 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-4894 | — | — | 2.1% | Apr 12, 2017 | SetsucoCMS all versions allows remote attackers to cause a denial of service via unspecified vectors. |
| CVE-2016-4893 | — | — | 1.6% | Apr 12, 2017 | SQL injection vulnerability in the SetsucoCMS all versions allows remote authenticated attackers to execute arbitrary SQ... |
| CVE-2016-4892 | — | — | 1.3% | Apr 12, 2017 | Cross-site scripting vulnerability in SetsucoCMS all versions allows remote attackers to inject arbitrary web script or ... |
| CVE-2016-4891 | — | — | 1.0% | Apr 12, 2017 | Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authent... |
| CVE-2016-4337 | — | — | 2.3% | Apr 12, 2017 | SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to e... |
| CVE-2016-2803 | — | — | 1.5% | Apr 12, 2017 | Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through ... |
| CVE-2016-1179 | — | — | 1.2% | Apr 12, 2017 | Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.... |
| CVE-2016-1178 | — | — | 1.3% | Apr 12, 2017 | The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers t... |
| CVE-2016-9959 | — | — | 2.3% | Apr 12, 2017 | game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. |
| CVE-2016-9958 | — | — | 2.3% | Apr 12, 2017 | game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations. |
| CVE-2016-9957 | — | — | 1.9% | Apr 12, 2017 | Stack-based buffer overflow in game-music-emu before 0.6.1. |
| CVE-2016-6808 | — | — | 19.0% | Apr 12, 2017 | Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42. |
| CVE-2016-4459 | — | — | 2.7% | Apr 12, 2017 | Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9. |
| CVE-2016-7958 | — | — | 2.2% | Apr 12, 2017 | In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was a... |
| CVE-2016-7957 | — | — | 1.7% | Apr 12, 2017 | In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file... |
| CVE-2016-7552 | — | — | 93.2% | Apr 12, 2017 | On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows... |
| CVE-2016-7547 | — | — | 92.7% | Apr 12, 2017 | A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in ... |
| CVE-2016-2553 | — | — | — | Apr 11, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2016-5322 | — | — | 1.6% | Apr 11, 2017 | The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service... |
| CVE-2016-4989 | — | — | 0.5% | Apr 11, 2017 | setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by... |
| CVE-2016-4446 | — | — | 0.5% | Apr 11, 2017 | The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstac... |
| CVE-2016-4445 | — | — | 0.5% | Apr 11, 2017 | The fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands a... |
| CVE-2016-4444 | — | — | 0.5% | Apr 11, 2017 | The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering... |
| CVE-2016-0779 | — | — | 9.9% | Apr 11, 2017 | The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute a... |
| CVE-2016-4468 | — | — | 2.1% | Apr 11, 2017 | SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now