2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-4828 | MEDIUM | 6.5 | 1.8% | Jun 25, 2016 | The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows remote attackers to ob... |
| CVE-2016-4827 | MEDIUM | 6.1 | 1.5% | Jun 25, 2016 | Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remot... |
| CVE-2016-4826 | MEDIUM | 6.1 | 1.5% | Jun 25, 2016 | Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remot... |
| CVE-2016-4825 | MEDIUM | 5.6 | 2.9% | Jun 25, 2016 | The Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to conduct PHP object injection ... |
| CVE-2016-2178 | MEDIUM | 5.5 | 1.2% | Jun 20, 2016 | The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of const... |
| CVE-2016-4530 | MEDIUM | 6.5 | 1.4% | Jun 19, 2016 | OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to cause a denial of service (... |
| CVE-2016-1224 | MEDIUM | 6.1 | 1.6% | Jun 19, 2016 | CRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry-Free Business Security 9.... |
| CVE-2016-1223 | MEDIUM | 5.3 | 4.2% | Jun 19, 2016 | Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-F... |
| CVE-2016-2391 | MEDIUM | 5 | 0.4% | Jun 16, 2016 | The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administ... |
| CVE-2016-4159 | MEDIUM | 6.1 | 1.9% | Jun 16, 2016 | Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Up... |
| CVE-2016-3234 | MEDIUM | 5.5 | 26.5% | Jun 16, 2016 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Ser... |
| CVE-2016-5337 | MEDIUM | 5.5 | 0.4% | Jun 14, 2016 | The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive... |
| CVE-2016-5238 | MEDIUM | 4.4 | 0.4% | Jun 14, 2016 | The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (ou... |
| CVE-2016-4911 | MEDIUM | 4.3 | 1.4% | Jun 13, 2016 | The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) allows remote authenticated users... |
| CVE-2016-4429 | MEDIUM | 5.9 | 4.0% | Jun 10, 2016 | Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) ... |
| CVE-2016-1222 | MEDIUM | 6.1 | 1.6% | Jun 5, 2016 | Cross-site scripting (XSS) vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to in... |
| CVE-2016-4454 | MEDIUM | 6 | 0.4% | Jun 1, 2016 | The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sens... |
| CVE-2016-4453 | MEDIUM | 4.4 | 0.4% | Jun 1, 2016 | The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial o... |
| CVE-2016-3094 | MEDIUM | 5.9 | 7.8% | Jun 1, 2016 | PlainSaslServer.java in Apache Qpid Java before 6.0.3, when the broker is configured to allow plaintext passwords, allow... |
| CVE-2016-4020 | MEDIUM | 6.5 | 0.4% | May 25, 2016 | The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local ... |
| CVE-2016-0264 | MEDIUM | 5.6 | 3.9% | May 24, 2016 | Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 ... |
| CVE-2016-4037 | MEDIUM | 6 | 0.4% | May 23, 2016 | The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of s... |
| CVE-2016-4441 | MEDIUM | 6 | 0.4% | May 20, 2016 | The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DM... |
| CVE-2016-4439 | MEDIUM | 6.7 | 0.5% | May 20, 2016 | The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly ch... |
| CVE-2016-4425 | MEDIUM | 6.5 | 1.9% | May 17, 2016 | Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumpti... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now