2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-10181 | HIGH | 7.5 | 3.9% | Jan 30, 2017 | An issue was discovered on the D-Link DWR-932B router. qmiweb provides sensitive information for CfgType=get_homeCfg req... |
| CVE-2016-10180 | HIGH | 7.5 | 4.4% | Jan 30, 2017 | An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding. |
| CVE-2016-10179 | HIGH | 7.5 | 4.9% | Jan 30, 2017 | An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607. |
| CVE-2016-9795 | HIGH | 7.8 | 0.5% | Jan 27, 2017 | The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and ... |
| CVE-2016-6264 | HIGH | 7.5 | 2.7% | Jan 27, 2017 | Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent atta... |
| CVE-2016-5827 | HIGH | 7.5 | 3.1% | Jan 27, 2017 | The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-b... |
| CVE-2016-9453 | HIGH | 7.8 | 2.6% | Jan 27, 2017 | The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds... |
| CVE-2016-10003 | HIGH | 7.5 | 4.8% | Jan 27, 2017 | Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in... |
| CVE-2016-9050 | HIGH | 8.2 | 2.9% | Jan 26, 2017 | An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database... |
| CVE-2016-8710 | HIGH | 7.8 | 3.4% | Jan 26, 2017 | An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted ... |
| CVE-2016-10159 | HIGH | 7.5 | 7.6% | Jan 24, 2017 | Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 all... |
| CVE-2016-9446 | HIGH | 7.5 | 3.6% | Jan 23, 2017 | The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensiti... |
| CVE-2016-9445 | HIGH | 7.5 | 3.7% | Jan 23, 2017 | Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via l... |
| CVE-2016-9381 | HIGH | 7.5 | 0.3% | Jan 23, 2017 | Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data o... |
| CVE-2016-6668 | HIGH | 7.5 | 3.7% | Jan 23, 2017 | The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 befor... |
| CVE-2016-5198 | HIGH | 8.8 | 34.7% | Jan 19, 2017 | V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac ... |
| CVE-2016-6497 | HIGH | 7.5 | 5.7% | Jan 18, 2017 | main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP en... |
| CVE-2016-6823 | HIGH | 7.5 | 4.8% | Jan 18, 2017 | Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (c... |
| CVE-2016-7434 | HIGH | 7.5 | 52.9% | Jan 13, 2017 | The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a craf... |
| CVE-2016-7426 | HIGH | 7.5 | 12.4% | Jan 13, 2017 | NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is... |
| CVE-2016-9882 | HIGH | 7.5 | 1.7% | Jan 13, 2017 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to... |
| CVE-2016-8399 | HIGH | 7 | 2.3% | Jan 12, 2017 | An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to... |
| CVE-2016-9131 | HIGH | 7.5 | 40.6% | Jan 12, 2017 | named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to c... |
| CVE-2016-8706 | HIGH | 8.1 | 45.7% | Jan 6, 2017 | An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of ... |
| CVE-2016-9754 | HIGH | 7.8 | 0.5% | Jan 5, 2017 | The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now