2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-7526 | MEDIUM | 6.5 | 3.8% | Apr 20, 2017 | coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted fil... |
| CVE-2016-7525 | MEDIUM | 6.5 | 3.1% | Apr 20, 2017 | Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-b... |
| CVE-2016-7521 | MEDIUM | 6.5 | 3.6% | Apr 20, 2017 | Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-b... |
| CVE-2016-7520 | MEDIUM | 6.5 | 3.1% | Apr 20, 2017 | Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-b... |
| CVE-2016-7518 | MEDIUM | 6.5 | 2.8% | Apr 20, 2017 | The ReadSUNImage function in coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bo... |
| CVE-2016-7517 | MEDIUM | 6.5 | 2.9% | Apr 20, 2017 | The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bo... |
| CVE-2016-7516 | MEDIUM | 6.5 | 2.9% | Apr 20, 2017 | The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (out-of-... |
| CVE-2016-7514 | MEDIUM | 6.5 | 3.1% | Apr 20, 2017 | The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (o... |
| CVE-2016-7513 | MEDIUM | 6.5 | 2.5% | Apr 20, 2017 | Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fau... |
| CVE-2016-5010 | — | — | 2.1% | Apr 20, 2017 | coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) vi... |
| CVE-2016-4862 | — | — | 2.1% | Apr 20, 2017 | Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remot... |
| CVE-2016-4850 | — | — | 2.2% | Apr 20, 2017 | LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code. |
| CVE-2016-4844 | — | — | 1.5% | Apr 20, 2017 | Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks. |
| CVE-2016-4843 | — | — | 1.9% | Apr 20, 2017 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information. |
| CVE-2016-4842 | — | — | 1.6% | Apr 20, 2017 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read. |
| CVE-2016-4818 | — | — | 0.9% | Apr 20, 2017 | DMMFX Trade for Android 1.5.0 and earlier, DMMFX DEMO Trade for Android 1.5.0 and earlier, and GAITAMEJAPAN FX Trade for... |
| CVE-2016-1220 | — | — | 1.0% | Apr 20, 2017 | Cybozu Garoon before 4.2.2 does not properly restrict access. |
| CVE-2016-1218 | — | — | 1.5% | Apr 20, 2017 | SQL injection vulnerability in Cybozu Garoon before 4.2.2. |
| CVE-2016-1217 | — | — | 1.1% | Apr 20, 2017 | Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2. |
| CVE-2016-1216 | — | — | 1.1% | Apr 20, 2017 | Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2. |
| CVE-2016-1215 | — | — | 1.1% | Apr 20, 2017 | Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2. |
| CVE-2016-1214 | — | — | 1.2% | Apr 20, 2017 | Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2. |
| CVE-2016-1213 | — | — | 1.3% | Apr 20, 2017 | The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites. |
| CVE-2016-6347 | — | — | 1.6% | Apr 20, 2017 | Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject ... |
| CVE-2016-6341 | — | — | 0.3% | Apr 20, 2017 | oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local ... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now