2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-8235 | — | — | 0.4% | Apr 10, 2017 | Privilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier than 2.0.16.3 allows loca... |
| CVE-2016-10323 | — | — | 0.6% | Apr 10, 2017 | Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synoph... |
| CVE-2016-10322 | — | — | 1.9% | Apr 10, 2017 | Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell m... |
| CVE-2016-5041 | HIGH | 7.5 | 3.4% | Apr 10, 2017 | dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereferenc... |
| CVE-2016-6879 | — | — | 0.6% | Apr 10, 2017 | The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified im... |
| CVE-2016-6878 | — | — | 1.2% | Apr 10, 2017 | The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to ... |
| CVE-2016-10311 | — | — | 2.2% | Apr 10, 2017 | Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by ... |
| CVE-2016-10310 | — | — | 2.0% | Apr 10, 2017 | Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remo... |
| CVE-2016-6605 | — | — | 1.4% | Apr 10, 2017 | Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization. |
| CVE-2016-10321 | — | — | 2.6% | Apr 10, 2017 | web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker ... |
| CVE-2016-10304 | MEDIUM | 6.5 | 1.6% | Apr 10, 2017 | The SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to cause a denial of service... |
| CVE-2016-6534 | — | — | 1.3% | Apr 10, 2017 | Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script.... |
| CVE-2016-5682 | MEDIUM | 6.1 | 1.0% | Apr 10, 2017 | Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section. |
| CVE-2016-5642 | — | — | 0.5% | Apr 10, 2017 | Opmantek NMIS before 8.5.12G has XSS via SNMP. |
| CVE-2016-5078 | — | — | 0.7% | Apr 10, 2017 | Paessler PRTG before 16.2.24.4045 has XSS via SNMP. |
| CVE-2016-5077 | — | — | 0.6% | Apr 10, 2017 | Netikus EventSentry before 3.2.1.44 has XSS via SNMP. |
| CVE-2016-5076 | — | — | 1.4% | Apr 10, 2017 | CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.d... |
| CVE-2016-5075 | — | — | 0.7% | Apr 10, 2017 | CloudView NMS before 2.10a has XSS via a TELNET login. |
| CVE-2016-5074 | — | — | 1.3% | Apr 10, 2017 | CloudView NMS before 2.10a has a format string issue exploitable over SNMP. |
| CVE-2016-5073 | — | — | 0.7% | Apr 10, 2017 | CloudView NMS before 2.10a has XSS via SNMP. |
| CVE-2016-5072 | — | — | 1.9% | Apr 10, 2017 | OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser c... |
| CVE-2016-5071 | — | — | 1.7% | Apr 10, 2017 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root. |
| CVE-2016-5070 | — | — | 1.3% | Apr 10, 2017 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext. |
| CVE-2016-5069 | — | — | 1.3% | Apr 10, 2017 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL. |
| CVE-2016-5068 | — | — | 1.6% | Apr 10, 2017 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi req... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now