2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-5609 | MEDIUM | 6.5 | 3.3% | Oct 25, 2016 | Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to... |
| CVE-2016-5584 | MEDIUM | 4.4 | 1.5% | Oct 25, 2016 | Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote a... |
| CVE-2016-5507 | MEDIUM | 4.9 | 2.7% | Oct 25, 2016 | Unspecified vulnerability in Oracle MySQL 5.6.32 and earlier and 5.7.14 and earlier allows remote administrators to affe... |
| CVE-2016-5504 | MEDIUM | 4.1 | 0.3% | Oct 25, 2016 | Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain ... |
| CVE-2016-3495 | MEDIUM | 4.9 | 2.7% | Oct 25, 2016 | Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vec... |
| CVE-2016-3492 | MEDIUM | 6.5 | 6.6% | Oct 25, 2016 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote a... |
| CVE-2016-3298 | MEDIUM | 6.5 | 32.8% | Oct 14, 2016 | Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 an... |
| CVE-2016-7423 | MEDIUM | 4.4 | 0.4% | Oct 10, 2016 | The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation... |
| CVE-2016-1000007 | MEDIUM | 6.1 | 0.7% | Oct 7, 2016 | Pagure 2.2.1 XSS in raw file endpoint |
| CVE-2016-1000114 | MEDIUM | 6.1 | 1.3% | Oct 6, 2016 | XSS in huge IT gallery v1.1.5 for Joomla |
| CVE-2016-1454 | MEDIUM | 6.5 | 1.9% | Oct 6, 2016 | Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 90... |
| CVE-2016-6418 | MEDIUM | 6.1 | 0.9% | Oct 5, 2016 | Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4... |
| CVE-2016-7909 | MEDIUM | 4.4 | 0.4% | Oct 5, 2016 | The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to caus... |
| CVE-2016-7908 | MEDIUM | 4.4 | 0.4% | Oct 5, 2016 | The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descripto... |
| CVE-2016-7907 | MEDIUM | 4.4 | 0.4% | Oct 5, 2016 | The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descripto... |
| CVE-2016-6306 | MEDIUM | 5.9 | 41.7% | Sep 26, 2016 | The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial o... |
| CVE-2016-5172 | MEDIUM | 6.5 | 1.9% | Sep 25, 2016 | The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers... |
| CVE-2016-4278 | MEDIUM | 6.5 | 4.1% | Sep 14, 2016 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635... |
| CVE-2016-4277 | MEDIUM | 6.5 | 4.2% | Sep 14, 2016 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635... |
| CVE-2016-4271 | MEDIUM | 6.5 | 4.6% | Sep 14, 2016 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635... |
| CVE-2016-3351 | MEDIUM | 6.5 | 26.3% | Sep 14, 2016 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a... |
| CVE-2016-0141 | MEDIUM | 6.5 | 4.9% | Sep 14, 2016 | The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private ke... |
| CVE-2016-6351 | MEDIUM | 6.7 | 0.5% | Sep 7, 2016 | The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation... |
| CVE-2016-5430 | MEDIUM | 5.3 | 1.7% | Sep 3, 2016 | The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling ... |
| CVE-2016-5107 | MEDIUM | 6 | 0.4% | Sep 2, 2016 | The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allo... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now