2016 CVE Vulnerabilities
10,647 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-6912 | — | — | 4.4% | Jan 26, 2017 | Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remot... |
| CVE-2016-6911 | — | — | 1.8% | Jan 26, 2017 | The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial... |
| CVE-2016-6908 | — | — | 0.7% | Jan 26, 2017 | Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.105... |
| CVE-2016-10025 | — | — | 0.5% | Jan 26, 2017 | VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HV... |
| CVE-2016-10024 | — | — | 0.4% | Jan 26, 2017 | Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) b... |
| CVE-2016-10013 | — | — | 0.4% | Jan 26, 2017 | Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL sin... |
| CVE-2016-9222 | — | — | 0.8% | Jan 26, 2017 | A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthenticat... |
| CVE-2016-9221 | — | — | 0.5% | Jan 26, 2017 | A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 28... |
| CVE-2016-9220 | — | — | 0.4% | Jan 26, 2017 | A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access... |
| CVE-2016-9218 | — | — | 0.7% | Jan 26, 2017 | A vulnerability in Cisco Hybrid Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site r... |
| CVE-2016-9216 | — | — | 2.9% | Jan 26, 2017 | An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an ... |
| CVE-2016-9307 | — | — | 2.2% | Jan 25, 2017 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when readi... |
| CVE-2016-9306 | — | — | 2.2% | Jan 25, 2017 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when readi... |
| CVE-2016-9305 | — | — | 1.2% | Jan 25, 2017 | Improper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted objects related to rea... |
| CVE-2016-9304 | — | — | 1.8% | Jan 25, 2017 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when readi... |
| CVE-2016-9303 | — | — | 4.1% | Jan 25, 2017 | Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code or cause a... |
| CVE-2016-8215 | — | — | 1.0% | Jan 25, 2017 | EMC RSA Security Analytics 10.5.3 and 10.6.2 contains fixes for a Reflected Cross-Site Scripting vulnerability that coul... |
| CVE-2016-8214 | — | — | 0.4% | Jan 25, 2017 | EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1 contain a vulnerability that may a... |
| CVE-2016-9041 | — | — | — | Jan 24, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-2971. Reason: This candidate is a reservation ... |
| CVE-2016-10162 | — | — | 5.9% | Jan 24, 2017 | The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote att... |
| CVE-2016-10161 | — | — | 13.3% | Jan 24, 2017 | The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x befo... |
| CVE-2016-10160 | CRITICAL | 9.8 | 7.3% | Jan 24, 2017 | Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 all... |
| CVE-2016-10159 | HIGH | 7.5 | 7.6% | Jan 24, 2017 | Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 all... |
| CVE-2016-10158 | — | — | 7.8% | Jan 24, 2017 | The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.... |
| CVE-2016-9447 | — | — | 2.8% | Jan 23, 2017 | The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service (out-of-boun... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now