2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-6367 | HIGH | 7.8 | 22.6% | Aug 18, 2016 | Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows loc... |
| CVE-2016-6366 | HIGH | 8.8 | 87.5% | Aug 18, 2016 | Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Service... |
| CVE-2016-5384 | HIGH | 7.8 | 0.4% | Aug 13, 2016 | fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequ... |
| CVE-2016-5421 | HIGH | 8.1 | 8.0% | Aug 10, 2016 | Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly h... |
| CVE-2016-3313 | HIGH | 7.8 | 49.8% | Aug 9, 2016 | Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote at... |
| CVE-2016-3309 | HIGH | 7.8 | 20.6% | Aug 9, 2016 | The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; ... |
| CVE-2016-5330 | HIGH | 7.8 | 18.0% | Aug 8, 2016 | Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 t... |
| CVE-2016-5340 | HIGH | 7.8 | 0.3% | Aug 7, 2016 | The is_ashmem_file function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center (QuIC) Android p... |
| CVE-2016-2065 | HIGH | 7.8 | 1.4% | Aug 7, 2016 | sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualc... |
| CVE-2016-2064 | HIGH | 7.8 | 0.6% | Aug 7, 2016 | sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualc... |
| CVE-2016-2063 | HIGH | 7.8 | 0.5% | Aug 7, 2016 | Stack-based buffer overflow in the supply_lm_input_write function in drivers/thermal/supply_lm_core.c in the MSM Thermal... |
| CVE-2016-4029 | HIGH | 8.6 | 4.6% | Aug 7, 2016 | WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, wh... |
| CVE-2016-6128 | HIGH | 7.5 | 6.7% | Aug 7, 2016 | The gdImageCropThreshold function in gd_crop.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP befor... |
| CVE-2016-6187 | HIGH | 7.8 | 2.4% | Aug 6, 2016 | The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buff... |
| CVE-2016-3841 | HIGH | 7.3 | 0.3% | Aug 6, 2016 | The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or ... |
| CVE-2016-6185 | HIGH | 7.8 | 0.8% | Aug 2, 2016 | The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which mig... |
| CVE-2016-1238 | HIGH | 7.8 | 0.8% | Aug 2, 2016 | (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scrip... |
| CVE-2016-1461 | HIGH | 7.5 | 2.4% | Aug 1, 2016 | Cisco AsyncOS on Email Security Appliance (ESA) devices through 9.7.0-125 allows remote attackers to bypass malware dete... |
| CVE-2016-5131 | HIGH | 8.8 | 2.3% | Jul 23, 2016 | Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attac... |
| CVE-2016-3565 | HIGH | 7.6 | 2.3% | Jul 21, 2016 | Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 5.1 and 5.2 allows r... |
| CVE-2016-3471 | HIGH | 7.5 | 0.4% | Jul 21, 2016 | Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confide... |
| CVE-2016-5388 | HIGH | 8.1 | 50.9% | Jul 19, 2016 | Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18... |
| CVE-2016-5387 | HIGH | 8.1 | 55.7% | Jul 19, 2016 | The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from t... |
| CVE-2016-5386 | HIGH | 8.1 | 5.2% | Jul 19, 2016 | The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and there... |
| CVE-2016-5385 | HIGH | 8.1 | 50.4% | Jul 19, 2016 | PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now