2016 CVE Vulnerabilities
10,648 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-8477 | — | — | 0.9% | Mar 8, 2017 | An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to acce... |
| CVE-2016-8417 | — | — | 1.5% | Mar 8, 2017 | An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to exec... |
| CVE-2016-8416 | — | — | 1.0% | Mar 8, 2017 | An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to acces... |
| CVE-2016-8413 | — | — | 0.9% | Mar 8, 2017 | An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to acce... |
| CVE-2016-9245 | — | — | 1.4% | Mar 7, 2017 | In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM ... |
| CVE-2016-10200 | HIGH | 7 | 0.3% | Mar 7, 2017 | Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privi... |
| CVE-2016-9740 | — | — | 1.4% | Mar 7, 2017 | IBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the ... |
| CVE-2016-9730 | — | — | 0.3% | Mar 7, 2017 | IBM QRadar Incident Forensics 7.2 is vulnerable to cross-site request forgery which could allow an attacker to execute m... |
| CVE-2016-9729 | — | — | 0.8% | Mar 7, 2017 | IBM QRadar 7.2 does not perform an authentication check for a critical resource or functionality allowing anonymous user... |
| CVE-2016-9728 | — | — | 1.3% | Mar 7, 2017 | IBM Qradar 7.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which coul... |
| CVE-2016-9727 | — | — | 2.5% | Mar 7, 2017 | IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a spe... |
| CVE-2016-9726 | — | — | 2.3% | Mar 7, 2017 | IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the syste... |
| CVE-2016-9725 | — | — | 0.9% | Mar 7, 2017 | IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing (CORS), which is a mechanism that allows web ... |
| CVE-2016-9724 | — | — | 1.2% | Mar 7, 2017 | IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when process... |
| CVE-2016-9723 | — | — | 0.6% | Mar 7, 2017 | IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code... |
| CVE-2016-9720 | — | — | 0.9% | Mar 7, 2017 | IBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used to mount further attac... |
| CVE-2016-9693 | — | — | 0.5% | Mar 7, 2017 | IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ul... |
| CVE-2016-8971 | — | — | 0.9% | Mar 7, 2017 | IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault whic... |
| CVE-2016-8940 | — | — | 0.9% | Mar 7, 2017 | IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking ... |
| CVE-2016-9643 | — | — | 3.1% | Mar 7, 2017 | The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrate... |
| CVE-2016-9087 | — | — | 2.2% | Mar 7, 2017 | SQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController.php in Exponent CMS 2.... |
| CVE-2016-9020 | — | — | 3.1% | Mar 7, 2017 | SQL injection vulnerability in framework/modules/help/controllers/helpController.php in Exponent CMS 2.3.9 and earlier a... |
| CVE-2016-9019 | — | — | 3.3% | Mar 7, 2017 | SQL injection vulnerability in the activate_address function in framework/modules/addressbook/controllers/addressControl... |
| CVE-2016-8863 | — | — | 8.5% | Mar 7, 2017 | Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) befo... |
| CVE-2016-7789 | — | — | 2.5% | Mar 7, 2017 | SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attac... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now