2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-5749 | — | — | 0.4% | Mar 23, 2017 | NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity ... |
| CVE-2016-5748 | — | — | 0.3% | Mar 23, 2017 | External Entity Processing (XXE) vulnerability in the "risk score" application of NetIQ Access Manager 4.1 before 4.1.2 ... |
| CVE-2016-5747 | — | — | 1.9% | Mar 23, 2017 | A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 a... |
| CVE-2016-1603 | — | — | 0.8% | Mar 23, 2017 | An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in... |
| CVE-2016-1602 | — | — | 0.5% | Mar 23, 2017 | A code injection in the supportconfig data collection tool in supportutils in SUSE Linux Enterprise Server 12 and 12-SP1... |
| CVE-2016-1597 | — | — | 1.2% | Mar 23, 2017 | A logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could escalate privileges to administrator. |
| CVE-2016-6650 | HIGH | 7.5 | 1.6% | Mar 21, 2017 | EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Strip... |
| CVE-2016-4504 | — | — | 0.5% | Mar 21, 2017 | A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pr... |
| CVE-2016-4931 | — | — | 0.9% | Mar 20, 2017 | XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service. |
| CVE-2016-4930 | — | — | 0.9% | Mar 20, 2017 | Cross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive informa... |
| CVE-2016-4929 | — | — | 3.8% | Mar 20, 2017 | Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user. |
| CVE-2016-4928 | — | — | 0.7% | Mar 20, 2017 | Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain adminis... |
| CVE-2016-4927 | — | — | 1.2% | Mar 20, 2017 | Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a... |
| CVE-2016-4926 | — | — | 2.5% | Mar 20, 2017 | Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to ... |
| CVE-2016-6816 | — | — | 39.6% | Mar 20, 2017 | The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.... |
| CVE-2016-9697 | — | — | 0.7% | Mar 20, 2017 | An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking At... |
| CVE-2016-9696 | — | — | 0.6% | Mar 20, 2017 | IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, w... |
| CVE-2016-9694 | — | — | 0.5% | Mar 20, 2017 | IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr... |
| CVE-2016-9165 | — | — | 4.3% | Mar 20, 2017 | The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified... |
| CVE-2016-8973 | — | — | 0.7% | Mar 20, 2017 | IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticated user to upload in... |
| CVE-2016-5857 | — | — | 0.3% | Mar 20, 2017 | The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the k... |
| CVE-2016-2981 | — | — | 0.3% | Mar 20, 2017 | An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user crede... |
| CVE-2016-2406 | — | — | 0.6% | Mar 20, 2017 | The permission control module in Huawei Document Security Management (aka DSM) before V100R002C05SPC670 allows remote au... |
| CVE-2016-10214 | — | — | 0.4% | Mar 20, 2017 | Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to c... |
| CVE-2016-8855 | — | — | 2.2% | Mar 19, 2017 | Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now