2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-5006 | — | — | 1.1% | May 2, 2017 | The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers ... |
| CVE-2016-4467 | — | — | 1.6% | May 2, 2017 | The C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on Windows do not properly veri... |
| CVE-2016-4442 | — | — | 1.6% | May 2, 2017 | The rack-mini-profiler gem before 0.10.1 for Ruby allows remote attackers to obtain sensitive information about allocate... |
| CVE-2016-10243 | — | — | 7.1% | May 2, 2017 | TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands... |
| CVE-2016-8649 | — | — | 2.8% | May 1, 2017 | lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inh... |
| CVE-2016-10351 | — | — | 0.4% | May 1, 2017 | Telegram Desktop 0.10.19 uses 0755 permissions for $HOME/.TelegramDesktop, which allows local users to obtain sensitive ... |
| CVE-2016-10350 | — | — | 1.6% | May 1, 2017 | The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote ... |
| CVE-2016-10349 | — | — | 1.7% | May 1, 2017 | The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of servic... |
| CVE-2016-8593 | — | — | 7.0% | Apr 28, 2017 | Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows ... |
| CVE-2016-8592 | — | — | 6.2% | Apr 28, 2017 | log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users ... |
| CVE-2016-8591 | — | — | 6.2% | Apr 28, 2017 | log_query.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to exec... |
| CVE-2016-8590 | — | — | 5.7% | Apr 28, 2017 | log_query_dlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to ... |
| CVE-2016-8589 | — | — | 5.7% | Apr 28, 2017 | log_query_dae.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to ... |
| CVE-2016-8588 | — | — | 2.2% | Apr 28, 2017 | The hotfix_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users... |
| CVE-2016-8587 | — | — | 2.5% | Apr 28, 2017 | dlp_policy_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users... |
| CVE-2016-8586 | — | — | 6.1% | Apr 28, 2017 | detected_potential_files.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticate... |
| CVE-2016-8585 | — | — | 7.2% | Apr 28, 2017 | admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to... |
| CVE-2016-8584 | — | — | 5.5% | Apr 28, 2017 | Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote attac... |
| CVE-2016-7843 | — | — | 3.4% | Apr 28, 2017 | Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and Atta... |
| CVE-2016-7842 | — | — | 2.6% | Apr 28, 2017 | Directory traversal vulnerability in AttacheCase 2.8.2.8 and earlier and 3.2.0.4 and earlier allows remote attackers to ... |
| CVE-2016-7841 | — | — | 0.9% | Apr 28, 2017 | Cross-site scripting vulnerability in Olive Diary DX allows remote attackers to inject arbitrary web script or HTML via ... |
| CVE-2016-7840 | — | — | 0.9% | Apr 28, 2017 | Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via th... |
| CVE-2016-7839 | — | — | 0.9% | Apr 28, 2017 | Cross-site scripting vulnerability in Olive Blog allows remote attackers to inject arbitrary web script or HTML via the ... |
| CVE-2016-7815 | — | — | 0.4% | Apr 28, 2017 | Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain acce... |
| CVE-2016-8962 | — | — | 1.3% | Apr 26, 2017 | IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for ... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now