2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-10053 | MEDIUM | 5.5 | 1.6% | Mar 23, 2017 | The WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of ... |
| CVE-2016-10052 | HIGH | 7.8 | 2.0% | Mar 23, 2017 | Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to c... |
| CVE-2016-10051 | HIGH | 7.8 | 1.9% | Mar 23, 2017 | Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers... |
| CVE-2016-10050 | HIGH | 7.8 | 2.0% | Mar 23, 2017 | Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers t... |
| CVE-2016-10049 | HIGH | 7.8 | 2.0% | Mar 23, 2017 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to ca... |
| CVE-2016-10048 | — | — | 6.5% | Mar 23, 2017 | Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary mo... |
| CVE-2016-10047 | — | — | 1.7% | Mar 23, 2017 | Memory leak in the NewXMLTree function in magick/xml-tree.c in ImageMagick before 6.9.4-7 allows remote attackers to cau... |
| CVE-2016-10046 | — | — | 2.0% | Mar 23, 2017 | Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMagick before 6.9.5-5 allows remote attack... |
| CVE-2016-9775 | — | — | 0.7% | Mar 23, 2017 | The postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0.45+dfsg-1~deb8u1 on De... |
| CVE-2016-9774 | — | — | 0.7% | Mar 23, 2017 | The postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6.0.35-1ubuntu3.9 on Ubu... |
| CVE-2016-6225 | — | — | 1.1% | Mar 23, 2017 | xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) f... |
| CVE-2016-10255 | — | — | 1.7% | Mar 23, 2017 | The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a de... |
| CVE-2016-10254 | — | — | 1.6% | Mar 23, 2017 | The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (cra... |
| CVE-2016-7468 | — | — | 1.8% | Mar 23, 2017 | An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously... |
| CVE-2016-9169 | — | — | 0.9% | Mar 23, 2017 | A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 ... |
| CVE-2016-9168 | — | — | 1.5% | Mar 23, 2017 | A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by r... |
| CVE-2016-9167 | — | — | 1.2% | Mar 23, 2017 | NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, whi... |
| CVE-2016-5758 | — | — | 0.5% | Mar 23, 2017 | A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.... |
| CVE-2016-5757 | — | — | 1.5% | Mar 23, 2017 | iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to iFrame ... |
| CVE-2016-5756 | — | — | 0.6% | Mar 23, 2017 | Multiple components of the web tools in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 were vulner... |
| CVE-2016-5755 | — | — | 0.5% | Mar 23, 2017 | NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to clickjacking attacks due to a mis... |
| CVE-2016-5754 | — | — | 1.1% | Mar 23, 2017 | Presence of a .htaccess file could leak information in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before SP... |
| CVE-2016-5752 | — | — | 1.1% | Mar 23, 2017 | The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handli... |
| CVE-2016-5751 | — | — | 0.7% | Mar 23, 2017 | An unfiltered finalizer target URL in the SAML processing feature in Identity Server in NetIQ Access Manager 4.1 before ... |
| CVE-2016-5750 | — | — | 1.1% | Mar 23, 2017 | The certificate upload feature in iManager in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 could... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now