2016 CVE Vulnerabilities
10,648 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-6873 | — | — | 2.2% | Feb 17, 2017 | Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors... |
| CVE-2016-6872 | — | — | 2.2% | Feb 17, 2017 | Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via u... |
| CVE-2016-6871 | — | — | 2.3% | Feb 17, 2017 | Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vector... |
| CVE-2016-6870 | — | — | 2.2% | Feb 17, 2017 | Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM ... |
| CVE-2016-6252 | — | — | 0.4% | Feb 17, 2017 | Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap. |
| CVE-2016-6191 | MEDIUM | 6.1 | 1.2% | Feb 17, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3... |
| CVE-2016-6190 | — | — | 1.2% | Feb 17, 2017 | SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote ... |
| CVE-2016-6189 | MEDIUM | 4.3 | 1.4% | Feb 17, 2017 | Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive in... |
| CVE-2016-5364 | — | — | 1.9% | Feb 17, 2017 | Cross-site scripting (XSS) vulnerability in manage_custom_field_edit_page.php in MantisBT 1.2.19 and earlier allows remo... |
| CVE-2016-5044 | HIGH | 7.5 | 4.4% | Feb 17, 2017 | The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial... |
| CVE-2016-5043 | HIGH | 7.5 | 4.4% | Feb 17, 2017 | The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-boun... |
| CVE-2016-5042 | HIGH | 7.5 | 4.1% | Feb 17, 2017 | The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (in... |
| CVE-2016-5040 | HIGH | 7.5 | 4.3% | Feb 17, 2017 | libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large... |
| CVE-2016-5039 | HIGH | 7.5 | 4.4% | Feb 17, 2017 | The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bou... |
| CVE-2016-5038 | HIGH | 7.5 | 4.4% | Feb 17, 2017 | The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to caus... |
| CVE-2016-5037 | MEDIUM | 6.5 | 2.9% | Feb 17, 2017 | The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL ... |
| CVE-2016-5036 | HIGH | 7.5 | 4.4% | Feb 17, 2017 | The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of ser... |
| CVE-2016-5035 | MEDIUM | 6.5 | 2.9% | Feb 17, 2017 | The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attack... |
| CVE-2016-5034 | MEDIUM | 6.5 | 2.9% | Feb 17, 2017 | dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write... |
| CVE-2016-5033 | MEDIUM | 6.5 | 2.9% | Feb 17, 2017 | The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out... |
| CVE-2016-5032 | MEDIUM | 6.5 | 2.9% | Feb 17, 2017 | The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (c... |
| CVE-2016-5031 | MEDIUM | 5.5 | 2.0% | Feb 17, 2017 | The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (ou... |
| CVE-2016-5030 | MEDIUM | 6.5 | 2.9% | Feb 17, 2017 | The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial... |
| CVE-2016-5029 | MEDIUM | 6.5 | 2.9% | Feb 17, 2017 | The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (... |
| CVE-2016-5028 | MEDIUM | 6.5 | 2.9% | Feb 17, 2017 | The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NU... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now