2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-8924 | — | — | 0.8% | Apr 26, 2017 | IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote attacker to hijack a user's session, caused by the fai... |
| CVE-2016-5483 | — | — | — | Apr 25, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation ... |
| CVE-2016-8030 | — | — | 1.2% | Apr 25, 2017 | A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows... |
| CVE-2016-6915 | — | — | 0.4% | Apr 24, 2017 | Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Tab... |
| CVE-2016-6917 | — | — | 0.4% | Apr 24, 2017 | Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OT... |
| CVE-2016-6916 | — | — | 0.4% | Apr 24, 2017 | Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before O... |
| CVE-2016-6903 | — | — | 4.9% | Apr 24, 2017 | lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. |
| CVE-2016-6902 | — | — | 5.1% | Apr 24, 2017 | lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. |
| CVE-2016-5551 | — | — | 0.4% | Apr 24, 2017 | Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition).... |
| CVE-2016-5016 | — | — | 1.0% | Apr 24, 2017 | Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 1... |
| CVE-2016-4313 | — | — | 8.7% | Apr 24, 2017 | Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitra... |
| CVE-2016-3691 | — | — | 0.6% | Apr 24, 2017 | Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request met... |
| CVE-2016-3114 | — | — | 0.9% | Apr 24, 2017 | Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leve... |
| CVE-2016-3076 | — | — | 2.6% | Apr 24, 2017 | Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cau... |
| CVE-2016-2564 | — | — | 1.3% | Apr 23, 2017 | Invision Power Services (IPS) Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid func... |
| CVE-2016-9954 | — | — | 2.4% | Apr 21, 2017 | The backtrack compilation code in the Irregex package (aka IrRegular Expressions) before 0.9.6 for Scheme allows remote ... |
| CVE-2016-5399 | HIGH | 7.8 | 9.8% | Apr 21, 2017 | The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attac... |
| CVE-2016-5168 | — | — | 1.7% | Apr 21, 2017 | Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain ... |
| CVE-2016-3702 | — | — | 1.2% | Apr 21, 2017 | Padding oracle flaw in CloudForms Management Engine (aka CFME) 5 allows remote attackers to obtain sensitive cleartext i... |
| CVE-2016-3109 | — | — | 28.2% | Apr 21, 2017 | The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code. |
| CVE-2016-3067 | — | — | 2.0% | Apr 21, 2017 | Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain pr... |
| CVE-2016-2433 | — | — | 0.7% | Apr 21, 2017 | The Broadcom Wi-Fi driver for Android, as used by BlackBerry smartphones before Build AAE570, allows remote attackers to... |
| CVE-2016-2347 | — | — | 3.2% | Apr 21, 2017 | Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote atta... |
| CVE-2016-2173 | CRITICAL | 9.8 | 6.3% | Apr 21, 2017 | org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute a... |
| CVE-2016-1561 | — | — | 74.3% | Apr 21, 2017 | ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, whic... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now