2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-1000306 | — | — | — | Apr 6, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-1000307. Reason: This candidate is a reservatio... |
| CVE-2016-8735 | CRITICAL | 9.8 | 90.3% | Apr 6, 2017 | Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8... |
| CVE-2016-6809 | CRITICAL | 9.8 | 8.1% | Apr 6, 2017 | Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists bec... |
| CVE-2016-5349 | — | — | 1.0% | Apr 6, 2017 | The high level operating systems (HLOS) was not providing sufficient memory address information to ensure that secure ap... |
| CVE-2016-9219 | — | — | 3.0% | Apr 6, 2017 | A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an u... |
| CVE-2016-9194 | — | — | 0.8% | Apr 6, 2017 | A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller ... |
| CVE-2016-10320 | — | — | 2.1% | Apr 6, 2017 | textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be ... |
| CVE-2016-10319 | — | — | 1.6% | Apr 6, 2017 | In ARM Trusted Firmware 1.2 and 1.3, a malformed firmware update SMC can result in copying unexpectedly large data into ... |
| CVE-2016-6100 | — | — | 0.6% | Apr 5, 2017 | IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM... |
| CVE-2016-3031 | — | — | 0.5% | Apr 5, 2017 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java... |
| CVE-2016-3015 | — | — | 0.5% | Apr 5, 2017 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java... |
| CVE-2016-9091 | — | — | 10.1% | Apr 5, 2017 | Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susc... |
| CVE-2016-5870 | HIGH | 7.8 | 0.4% | Apr 4, 2017 | The msm_ipc_router_close function in net/ipc_router/ipc_router_socket.c in the ipc_router component for the Linux kernel... |
| CVE-2016-3740 | — | — | 15.8% | Apr 4, 2017 | Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows... |
| CVE-2016-10318 | — | — | 2.2% | Apr 4, 2017 | A missing authorization check in the fscrypt_process_policy function in fs/crypto/policy.c in the ext4 and f2fs filesyst... |
| CVE-2016-10229 | CRITICAL | 9.8 | 12.8% | Apr 4, 2017 | udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an ... |
| CVE-2016-10317 | — | — | 2.3% | Apr 3, 2017 | The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attac... |
| CVE-2016-10316 | — | — | 0.8% | Apr 3, 2017 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Lin... |
| CVE-2016-10315 | — | — | 0.8% | Apr 3, 2017 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Lin... |
| CVE-2016-10314 | — | — | 1.2% | Apr 3, 2017 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Lin... |
| CVE-2016-10313 | — | — | 0.6% | Apr 3, 2017 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Lin... |
| CVE-2016-10312 | — | — | 3.4% | Apr 3, 2017 | Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Lin... |
| CVE-2016-10226 | — | — | 1.7% | Apr 3, 2017 | JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a den... |
| CVE-2016-10222 | — | — | 1.7% | Apr 3, 2017 | runtime/JSONObject.cpp in JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remot... |
| CVE-2016-10221 | MEDIUM | 4.3 | 1.4% | Apr 3, 2017 | The count_entries function in pdf-layer.c in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to cause a denia... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now