2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-1184 | MEDIUM | 5.9 | 1.0% | Apr 21, 2017 | Tokyo Star bank App for Android before 1.4 and Tokyo Star bank App for iOS before 1.4 do not validate SSL certificates. |
| CVE-2016-1148 | HIGH | 8.1 | 0.9% | Apr 21, 2017 | Akerun - Smart Lock Robot App for iOS before 1.2.4 does not verify SSL certificates. |
| CVE-2016-0833 | — | — | 0.6% | Apr 21, 2017 | Android allows users to cause a denial of service. |
| CVE-2016-4075 | MEDIUM | 6.1 | 1.2% | Apr 21, 2017 | Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, related... |
| CVE-2016-6368 | — | — | 3.0% | Apr 20, 2017 | A vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol packets for Cisco Firepowe... |
| CVE-2016-9980 | — | — | 0.6% | Apr 20, 2017 | IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows u... |
| CVE-2016-9979 | — | — | 0.5% | Apr 20, 2017 | IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows u... |
| CVE-2016-9978 | — | — | 0.7% | Apr 20, 2017 | IBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated attacker to disclose sensitive inform... |
| CVE-2016-8923 | — | — | 0.7% | Apr 20, 2017 | IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to ob... |
| CVE-2016-5401 | — | — | 0.6% | Apr 20, 2017 | Cross-site request forgery (CSRF) vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote attackers to hijack the a... |
| CVE-2016-3734 | — | — | 1.1% | Apr 20, 2017 | Cross-site request forgery (CSRF) vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 thr... |
| CVE-2016-3733 | — | — | 1.2% | Apr 20, 2017 | The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, an... |
| CVE-2016-3732 | — | — | 1.4% | Apr 20, 2017 | The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 thro... |
| CVE-2016-3731 | — | — | 1.6% | Apr 20, 2017 | Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidde... |
| CVE-2016-3729 | — | — | 1.3% | Apr 20, 2017 | The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlie... |
| CVE-2016-1161 | — | — | 1.0% | Apr 20, 2017 | Cross-site request forgery (CSRF) vulnerability in ManageEngine Password Manager Pro before 8.5 (Build 8500). |
| CVE-2016-8721 | CRITICAL | 9.1 | 3.3% | Apr 20, 2017 | An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A W... |
| CVE-2016-7540 | — | — | 2.8% | Apr 20, 2017 | coders/rgf.c in ImageMagick before 6.9.4-10 allows remote attackers to cause a denial of service (assertion failure) by ... |
| CVE-2016-7538 | MEDIUM | 6.5 | 3.4% | Apr 20, 2017 | coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted fil... |
| CVE-2016-7536 | MEDIUM | 6.5 | 2.7% | Apr 20, 2017 | magick/profile.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted ... |
| CVE-2016-7535 | MEDIUM | 6.5 | 3.3% | Apr 20, 2017 | coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PSD... |
| CVE-2016-7534 | MEDIUM | 6.5 | 3.3% | Apr 20, 2017 | The generic decoder in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a cra... |
| CVE-2016-7532 | MEDIUM | 6.5 | 2.9% | Apr 20, 2017 | coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD ... |
| CVE-2016-7530 | MEDIUM | 6.5 | 3.3% | Apr 20, 2017 | The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or o... |
| CVE-2016-7527 | MEDIUM | 6.5 | 2.5% | Apr 20, 2017 | coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now