2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-9244 | — | — | 74.0% | Feb 9, 2017 | A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may... |
| CVE-2016-8494 | — | — | 1.5% | Feb 9, 2017 | Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary c... |
| CVE-2016-6173 | — | — | 2.9% | Feb 9, 2017 | NSD before 4.1.11 allows remote DNS master servers to cause a denial of service (/tmp disk consumption and slave server ... |
| CVE-2016-6171 | HIGH | 8.6 | 2.8% | Feb 9, 2017 | Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service (memory exhaustion and slave server crash) ... |
| CVE-2016-5727 | — | — | 1.5% | Feb 9, 2017 | LogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and exec... |
| CVE-2016-5726 | — | — | 1.6% | Feb 9, 2017 | Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and exec... |
| CVE-2016-4988 | MEDIUM | 6.1 | 1.2% | Feb 9, 2017 | Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote att... |
| CVE-2016-4987 | MEDIUM | 6.5 | 3.0% | Feb 9, 2017 | Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbi... |
| CVE-2016-4986 | HIGH | 7.5 | 3.0% | Feb 9, 2017 | Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary fil... |
| CVE-2016-3102 | — | — | 1.7% | Feb 9, 2017 | The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection m... |
| CVE-2016-3101 | MEDIUM | 5.4 | 1.2% | Feb 9, 2017 | Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to i... |
| CVE-2016-2148 | CRITICAL | 9.8 | 28.4% | Feb 9, 2017 | Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecif... |
| CVE-2016-2147 | HIGH | 7.5 | 8.1% | Feb 9, 2017 | Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of servi... |
| CVE-2016-10199 | — | — | 4.2% | Feb 9, 2017 | The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remo... |
| CVE-2016-10198 | — | — | 2.7% | Feb 9, 2017 | The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3... |
| CVE-2016-10192 | — | — | 6.2% | Feb 9, 2017 | Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x befo... |
| CVE-2016-10191 | — | — | 7.5% | Feb 9, 2017 | Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and... |
| CVE-2016-10190 | — | — | 8.4% | Feb 9, 2017 | Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.... |
| CVE-2016-9686 | — | — | 1.3% | Feb 8, 2017 | The Puppet Communications Protocol (PCP) Broker incorrectly validates message header sizes. An attacker could use this t... |
| CVE-2016-9005 | — | — | 1.8% | Feb 8, 2017 | IBM System Storage TS3100-TS3200 Tape Library could allow an unauthenticated user with access to the company network, to... |
| CVE-2016-8954 | — | — | 2.4% | Feb 8, 2017 | IBM dashDB Local uses hard-coded credentials that could allow a remote attacker to gain access to the Docker container o... |
| CVE-2016-5934 | — | — | 1.0% | Feb 8, 2017 | IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. By ... |
| CVE-2016-5918 | — | — | 0.3% | Feb 8, 2017 | IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace o... |
| CVE-2016-5902 | — | — | 0.9% | Feb 8, 2017 | IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja... |
| CVE-2016-5900 | — | — | 0.9% | Feb 8, 2017 | IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive inform... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now