2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-10253 | — | — | 1.5% | Mar 18, 2017 | An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap ... |
| CVE-2016-10187 | — | — | 2.8% | Mar 16, 2017 | The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with Ja... |
| CVE-2016-0770 | — | — | 1.8% | Mar 16, 2017 | Cross-site scripting (XSS) vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugin... |
| CVE-2016-10247 | MEDIUM | 5.5 | 1.6% | Mar 16, 2017 | Buffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allo... |
| CVE-2016-10246 | MEDIUM | 5.5 | 1.5% | Mar 16, 2017 | Buffer overflow in the main function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF before 1.10 allows rem... |
| CVE-2016-5239 | — | — | 3.2% | Mar 15, 2017 | The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute a... |
| CVE-2016-7955 | — | — | 6.4% | Mar 15, 2017 | The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5... |
| CVE-2016-7103 | MEDIUM | 6.1 | 22.6% | Mar 15, 2017 | Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web... |
| CVE-2016-10197 | HIGH | 7.5 | 5.2% | Mar 15, 2017 | The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out... |
| CVE-2016-10196 | HIGH | 7.5 | 5.2% | Mar 15, 2017 | Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows ... |
| CVE-2016-10195 | CRITICAL | 9.8 | 6.7% | Mar 15, 2017 | The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via ... |
| CVE-2016-10168 | — | — | 3.7% | Mar 15, 2017 | Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecif... |
| CVE-2016-10167 | — | — | 3.7% | Mar 15, 2017 | The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attac... |
| CVE-2016-10166 | — | — | 10.7% | Mar 15, 2017 | Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) bef... |
| CVE-2016-10163 | — | — | 0.4% | Mar 15, 2017 | Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allow... |
| CVE-2016-10155 | MEDIUM | 6 | 0.4% | Mar 15, 2017 | Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a... |
| CVE-2016-8002 | — | — | — | Mar 15, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2016-6906 | — | — | 2.0% | Mar 15, 2017 | The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to c... |
| CVE-2016-10251 | — | — | 2.4% | Mar 15, 2017 | Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to hav... |
| CVE-2016-10250 | — | — | 4.0% | Mar 15, 2017 | The jp2_colr_destroy function in jp2_cod.c in JasPer before 1.900.13 allows remote attackers to cause a denial of servic... |
| CVE-2016-10249 | — | — | 2.1% | Mar 15, 2017 | Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to ha... |
| CVE-2016-10248 | — | — | 4.0% | Mar 15, 2017 | The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of ser... |
| CVE-2016-8027 | — | — | 5.7% | Mar 14, 2017 | SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5... |
| CVE-2016-8026 | — | — | 0.4% | Mar 14, 2017 | Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus (SSP) 3.11.469 and earlier allows ... |
| CVE-2016-8025 | — | — | 6.5% | Mar 14, 2017 | SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authen... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now