2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-5796 | — | — | 2.3% | Feb 13, 2017 | An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. ... |
| CVE-2016-5786 | — | — | 1.6% | Feb 13, 2017 | An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the... |
| CVE-2016-5782 | — | — | 2.1% | Feb 13, 2017 | An issue was discovered in Locus Energy LGate prior to 1.05H, LGate 50, LGate 100, LGate 101, LGate 120, and LGate 320. ... |
| CVE-2016-2274 | — | — | 0.8% | Feb 13, 2017 | An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface does not neutralize or... |
| CVE-2016-10224 | HIGH | 7.2 | 1.2% | Feb 13, 2017 | An issue was discovered in Sauter NovaWeb web HMI. The application uses a protection mechanism that relies on the existe... |
| CVE-2016-8859 | — | — | 3.4% | Feb 13, 2017 | Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large numbe... |
| CVE-2016-8659 | — | — | 0.4% | Feb 13, 2017 | Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to ... |
| CVE-2016-7565 | — | — | 2.3% | Feb 13, 2017 | install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters i... |
| CVE-2016-6129 | HIGH | 7.5 | 0.8% | Feb 13, 2017 | The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate t... |
| CVE-2016-5100 | — | — | 1.9% | Feb 13, 2017 | Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attacker... |
| CVE-2016-4547 | — | — | 1.1% | Feb 13, 2017 | Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) ... |
| CVE-2016-4546 | — | — | 0.3% | Feb 13, 2017 | Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service c... |
| CVE-2016-3995 | — | — | 1.9% | Feb 13, 2017 | The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka... |
| CVE-2016-3616 | — | — | 4.4% | Feb 13, 2017 | The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and applicat... |
| CVE-2016-2788 | — | — | 2.3% | Feb 13, 2017 | MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary cod... |
| CVE-2016-2787 | — | — | 0.6% | Feb 13, 2017 | The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates... |
| CVE-2016-2568 | HIGH | 7.8 | 0.4% | Feb 13, 2017 | pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl ca... |
| CVE-2016-10026 | — | — | 2.1% | Feb 13, 2017 | ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git... |
| CVE-2016-6210 | MEDIUM | 5.9 | 88.9% | Feb 13, 2017 | sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static ... |
| CVE-2016-8495 | — | — | 0.9% | Feb 13, 2017 | An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 al... |
| CVE-2016-8713 | HIGH | 7.8 | 1.1% | Feb 10, 2017 | A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.... |
| CVE-2016-8711 | HIGH | 7.8 | 2.0% | Feb 10, 2017 | A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially cra... |
| CVE-2016-8709 | HIGH | 7.8 | 1.3% | Feb 10, 2017 | A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A... |
| CVE-2016-10216 | — | — | 0.8% | Feb 10, 2017 | An issue was discovered in IT ITems DataBase (ITDB) through 1.23. The vulnerability exists due to insufficient filtratio... |
| CVE-2016-10215 | — | — | 0.8% | Feb 10, 2017 | An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability exists due to insufficien... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now