2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-6301 | HIGH | 7.5 | 8.9% | Dec 9, 2016 | The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of se... |
| CVE-2016-8858 | HIGH | 7.5 | 29.5% | Dec 9, 2016 | The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of ... |
| CVE-2016-9120 | HIGH | 7.8 | 1.7% | Dec 8, 2016 | Race condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows loca... |
| CVE-2016-9919 | HIGH | 7.5 | 5.7% | Dec 8, 2016 | The icmp6_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data stru... |
| CVE-2016-9917 | HIGH | 7.5 | 3.6% | Dec 8, 2016 | In BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source file. This issue can be t... |
| CVE-2016-9839 | HIGH | 7.5 | 1.5% | Dec 8, 2016 | In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connecti... |
| CVE-2016-8655 | HIGH | 7.8 | 11.1% | Dec 8, 2016 | Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau... |
| CVE-2016-9156 | HIGH | 7.3 | 1.5% | Dec 5, 2016 | A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to upload, download, or d... |
| CVE-2016-1247 | HIGH | 7.8 | 4.9% | Nov 29, 2016 | The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS... |
| CVE-2016-9313 | HIGH | 7.8 | 2.1% | Nov 28, 2016 | security/keys/big_key.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto registration in conjunction with... |
| CVE-2016-9083 | HIGH | 7.8 | 0.4% | Nov 28, 2016 | drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and... |
| CVE-2016-8632 | HIGH | 7.8 | 0.4% | Nov 28, 2016 | The tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not validate the relationship betw... |
| CVE-2016-9562 | HIGH | 7.5 | 3.9% | Nov 23, 2016 | SAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service (null pointer exception and icman outage)... |
| CVE-2016-8562 | HIGH | 7.5 | 3.6% | Nov 18, 2016 | A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < ... |
| CVE-2016-7913 | HIGH | 7.8 | 2.2% | Nov 16, 2016 | The xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users ... |
| CVE-2016-7912 | HIGH | 7.8 | 2.1% | Nov 16, 2016 | Use-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function/f_fs.c in the Linux ker... |
| CVE-2016-7911 | HIGH | 7.8 | 1.5% | Nov 16, 2016 | Race condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel before 4.6.6 allows local users to ... |
| CVE-2016-7910 | HIGH | 7.8 | 3.0% | Nov 16, 2016 | Use-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel before 4.7.1 allows loc... |
| CVE-2016-9294 | HIGH | 7.5 | 2.8% | Nov 12, 2016 | Artifex Software, Inc. MuJS before 5008105780c0b0182ea6eda83ad5598f225be3ee allows context-dependent attackers to conduc... |
| CVE-2016-9274 | HIGH | 7.8 | 0.9% | Nov 11, 2016 | Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.... |
| CVE-2016-5195 | HIGH | 7 | 83.5% | Nov 10, 2016 | Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev... |
| CVE-2016-7256 | HIGH | 8.8 | 64.8% | Nov 10, 2016 | atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,... |
| CVE-2016-7255 | HIGH | 7.8 | 81.0% | Nov 10, 2016 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, ... |
| CVE-2016-7201 | HIGH | 8.8 | 79.7% | Nov 10, 2016 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a de... |
| CVE-2016-7200 | HIGH | 8.8 | 82.5% | Nov 10, 2016 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a de... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now