2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-2404 | — | — | 0.8% | Apr 2, 2017 | Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R0... |
| CVE-2016-7585 | — | — | 0.2% | Apr 2, 2017 | An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of D... |
| CVE-2016-8032 | — | — | 0.3% | Mar 31, 2017 | Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local attack... |
| CVE-2016-6561 | — | — | 2.5% | Mar 31, 2017 | illumos smbsrv NULL pointer dereference allows system crash. |
| CVE-2016-6560 | — | — | 1.7% | Mar 31, 2017 | illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a s... |
| CVE-2016-9990 | — | — | 1.3% | Mar 31, 2017 | IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr... |
| CVE-2016-9707 | — | — | 1.5% | Mar 31, 2017 | IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when pr... |
| CVE-2016-8935 | — | — | 0.5% | Mar 31, 2017 | IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulne... |
| CVE-2016-8917 | — | — | 0.6% | Mar 31, 2017 | IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to exe... |
| CVE-2016-6111 | — | — | 2.1% | Mar 31, 2017 | IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity ... |
| CVE-2016-6036 | — | — | 0.5% | Mar 31, 2017 | IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows u... |
| CVE-2016-6031 | — | — | 0.5% | Mar 31, 2017 | IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users t... |
| CVE-2016-6022 | — | — | 0.5% | Mar 31, 2017 | IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to e... |
| CVE-2016-6209 | — | — | 1.8% | Mar 31, 2017 | Cross-site scripting (XSS) vulnerability in Nagios. |
| CVE-2016-9319 | — | — | 0.8% | Mar 31, 2017 | There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7... |
| CVE-2016-7542 | — | — | 1.5% | Mar 30, 2017 | A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have acc... |
| CVE-2016-7541 | — | — | 1.0% | Mar 30, 2017 | Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during I... |
| CVE-2016-10309 | — | — | 1.7% | Mar 30, 2017 | In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an ALB... |
| CVE-2016-10308 | — | — | 2.9% | Mar 30, 2017 | Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable pass... |
| CVE-2016-10307 | CRITICAL | 9.8 | 2.4% | Mar 30, 2017 | Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root... |
| CVE-2016-10306 | — | — | 2.7% | Mar 30, 2017 | Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. This account is ac... |
| CVE-2016-10305 | CRITICAL | 9.8 | 1.7% | Mar 30, 2017 | Trango Apex <= 2.1.1, ApexLynx < 2.0, ApexOrion < 2.0, ApexPlus <= 3.2.0, Giga <= 2.6.1, GigaLynx < 2.0, GigaOrion < 2.0... |
| CVE-2016-6349 | — | — | 0.4% | Mar 29, 2017 | The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensiti... |
| CVE-2016-4976 | — | — | 0.5% | Mar 29, 2017 | Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users... |
| CVE-2016-2379 | — | — | 0.4% | Mar 29, 2017 | The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now