2016 CVE Vulnerabilities

10,647 CVEs published in 2016.

CVE IDSeverityCVSSDescription
CVE-2016-6872Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via u...
CVE-2016-6871Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vector...
CVE-2016-6870Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM ...
CVE-2016-6252Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.
CVE-2016-6191MEDIUM6.1Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3...
CVE-2016-6190SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote ...
CVE-2016-6189MEDIUM4.3Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive in...
CVE-2016-5364Cross-site scripting (XSS) vulnerability in manage_custom_field_edit_page.php in MantisBT 1.2.19 and earlier allows remo...
CVE-2016-5044HIGH7.5The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial...
CVE-2016-5043HIGH7.5The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-boun...
CVE-2016-5042HIGH7.5The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (in...
CVE-2016-5040HIGH7.5libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large...
CVE-2016-5039HIGH7.5The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bou...
CVE-2016-5038HIGH7.5The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to caus...
CVE-2016-5037MEDIUM6.5The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL ...
CVE-2016-5036HIGH7.5The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of ser...
CVE-2016-5035MEDIUM6.5The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attack...
CVE-2016-5034MEDIUM6.5dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write...
CVE-2016-5033MEDIUM6.5The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out...
CVE-2016-5032MEDIUM6.5The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (c...
CVE-2016-5031MEDIUM5.5The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (ou...
CVE-2016-5030MEDIUM6.5The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial...
CVE-2016-5029MEDIUM6.5The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (...
CVE-2016-5028MEDIUM6.5The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NU...
CVE-2016-6251Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ...

Check if your code is affected by 2016 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now