2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-9821 | — | — | 1.2% | Mar 1, 2017 | Integer overflow in libavcodec/mpegvideo_parser.c in libav 11.8 allows remote attackers to cause a denial of service (cr... |
| CVE-2016-9820 | — | — | 0.9% | Mar 1, 2017 | libavcodec/mpegvideo_motion.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors inv... |
| CVE-2016-9819 | — | — | 1.0% | Mar 1, 2017 | libavcodec/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via vectors involving ... |
| CVE-2016-9559 | MEDIUM | 6.5 | 3.6% | Mar 1, 2017 | coders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service (NULL pointer dereferen... |
| CVE-2016-8508 | MEDIUM | 6.5 | 1.6% | Mar 1, 2017 | Yandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in Chromium) warnings in web... |
| CVE-2016-8507 | MEDIUM | 6.5 | 1.5% | Mar 1, 2017 | Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remot... |
| CVE-2016-10095 | — | — | 2.7% | Mar 1, 2017 | Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6... |
| CVE-2016-10094 | — | — | 1.8% | Mar 1, 2017 | Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attacke... |
| CVE-2016-10093 | — | — | 2.0% | Mar 1, 2017 | Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0a... |
| CVE-2016-10092 | — | — | 2.4% | Mar 1, 2017 | Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.... |
| CVE-2016-9558 | CRITICAL | 9.8 | 5.1% | Feb 28, 2017 | (1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have uns... |
| CVE-2016-9261 | MEDIUM | 5.4 | 0.7% | Feb 28, 2017 | Cross-site scripting (XSS) vulnerability in Tenable Log Correlation Engine (aka LCE) before 4.8.1 allows remote authenti... |
| CVE-2016-9259 | — | — | 0.9% | Feb 28, 2017 | Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.1 allows remote authenticated users to inject arbi... |
| CVE-2016-10207 | — | — | 3.2% | Feb 28, 2017 | The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by te... |
| CVE-2016-8715 | HIGH | 7.8 | 1.9% | Feb 28, 2017 | An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A sp... |
| CVE-2016-8389 | HIGH | 7.8 | 2.1% | Feb 28, 2017 | An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to ... |
| CVE-2016-8388 | HIGH | 7.8 | 1.9% | Feb 28, 2017 | An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed... |
| CVE-2016-9818 | — | — | 0.5% | Feb 27, 2017 | Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asy... |
| CVE-2016-9817 | — | — | 0.5% | Feb 27, 2017 | Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) ... |
| CVE-2016-9816 | — | — | 0.5% | Feb 27, 2017 | Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asy... |
| CVE-2016-9815 | — | — | 0.5% | Feb 27, 2017 | Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by sending an asynchronous a... |
| CVE-2016-7553 | — | — | 0.4% | Feb 27, 2017 | The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created betwee... |
| CVE-2016-5240 | — | — | 2.2% | Feb 27, 2017 | The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allo... |
| CVE-2016-10029 | MEDIUM | 5.5 | 0.4% | Feb 27, 2017 | The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows lo... |
| CVE-2016-10028 | MEDIUM | 5.5 | 0.4% | Feb 27, 2017 | The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Devic... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now