2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-5106 | MEDIUM | 6 | 0.4% | Sep 2, 2016 | The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Ada... |
| CVE-2016-5105 | MEDIUM | 4.4 | 0.4% | Sep 2, 2016 | The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter e... |
| CVE-2016-4952 | MEDIUM | 6 | 0.4% | Sep 2, 2016 | QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS a... |
| CVE-2016-6298 | MEDIUM | 5.3 | 2.2% | Sep 1, 2016 | The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling pro... |
| CVE-2016-4655 | MEDIUM | 5.5 | 33.4% | Aug 25, 2016 | The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. |
| CVE-2016-5845 | MEDIUM | 5.5 | 3.0% | Aug 13, 2016 | SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to ca... |
| CVE-2016-6207 | MEDIUM | 6.5 | 6.3% | Aug 12, 2016 | Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before 2... |
| CVE-2016-5403 | MEDIUM | 5.5 | 0.5% | Aug 2, 2016 | The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of servi... |
| CVE-2016-6257 | MEDIUM | 6.5 | 1.0% | Aug 2, 2016 | The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboa... |
| CVE-2016-2775 | MEDIUM | 5.9 | 63.3% | Jul 19, 2016 | ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option... |
| CVE-2016-5660 | MEDIUM | 6.1 | 1.7% | Jul 15, 2016 | Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows r... |
| CVE-2016-5787 | MEDIUM | 6.3 | 0.4% | Jul 15, 2016 | General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows lo... |
| CVE-2016-4247 | MEDIUM | 5.3 | 3.2% | Jul 13, 2016 | Race condition in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and b... |
| CVE-2016-4178 | MEDIUM | 4.3 | 3.2% | Jul 13, 2016 | Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632... |
| CVE-2016-4428 | MEDIUM | 5.4 | 2.1% | Jul 12, 2016 | Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allo... |
| CVE-2016-1445 | MEDIUM | 5.3 | 1.3% | Jul 12, 2016 | Cisco Adaptive Security Appliance (ASA) Software 8.2 through 9.4.3.3 allows remote attackers to bypass intended ICMP Ech... |
| CVE-2016-1444 | MEDIUM | 6.5 | 1.2% | Jul 7, 2016 | The Mobile and Remote Access (MRA) component in Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7 an... |
| CVE-2016-0230 | MEDIUM | 6.8 | 0.4% | Jul 7, 2016 | IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 thr... |
| CVE-2016-6170 | MEDIUM | 6.5 | 40.5% | Jul 6, 2016 | ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a d... |
| CVE-2016-4508 | MEDIUM | 6.1 | 0.9% | Jul 6, 2016 | Cross-site scripting (XSS) vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers ... |
| CVE-2016-4507 | MEDIUM | 6.4 | 0.9% | Jul 6, 2016 | SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to ... |
| CVE-2016-4956 | MEDIUM | 5.3 | 16.1% | Jul 5, 2016 | ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and tim... |
| CVE-2016-4955 | MEDIUM | 5.9 | 8.8% | Jul 5, 2016 | ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-vari... |
| CVE-2016-5848 | MEDIUM | 6.7 | 0.3% | Jul 4, 2016 | Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local ... |
| CVE-2016-3189 | MEDIUM | 6.5 | 15.6% | Jun 30, 2016 | Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash)... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now