2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-3721 | MEDIUM | 4.3 | 2.1% | May 17, 2016 | Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters in... |
| CVE-2016-3712 | MEDIUM | 5.5 | 0.5% | May 11, 2016 | Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read ... |
| CVE-2016-1115 | MEDIUM | 5.9 | 2.5% | May 11, 2016 | Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields o... |
| CVE-2016-1113 | MEDIUM | 6.1 | 3.1% | May 11, 2016 | Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Up... |
| CVE-2016-3718 | MEDIUM | 5.5 | 76.9% | May 5, 2016 | The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct ... |
| CVE-2016-3715 | MEDIUM | 5.5 | 75.4% | May 5, 2016 | The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary fi... |
| CVE-2016-2107 | MEDIUM | 5.9 | 89.1% | May 5, 2016 | The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a ... |
| CVE-2016-2782 | MEDIUM | 4.6 | 1.6% | Apr 27, 2016 | The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attack... |
| CVE-2016-2383 | MEDIUM | 5.5 | 0.4% | Apr 27, 2016 | The adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the ... |
| CVE-2016-0668 | MEDIUM | 4.1 | 1.5% | Apr 21, 2016 | Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 an... |
| CVE-2016-0651 | MEDIUM | 5.5 | 1.2% | Apr 21, 2016 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors relat... |
| CVE-2016-0642 | MEDIUM | 4.7 | 1.2% | Apr 21, 2016 | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local us... |
| CVE-2016-0162 | MEDIUM | 4.3 | 22.1% | Apr 12, 2016 | Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScr... |
| CVE-2016-0128 | MEDIUM | 6.8 | 20.9% | Apr 12, 2016 | The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 ... |
| CVE-2016-1180 | MEDIUM | 6.1 | 1.6% | Apr 8, 2016 | Cross-site scripting (XSS) vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x al... |
| CVE-2016-3975 | MEDIUM | 6.1 | 1.6% | Apr 7, 2016 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to inject arbi... |
| CVE-2016-3973 | MEDIUM | 5.3 | 2.4% | Apr 7, 2016 | The chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java AS 7.1 through 7.5 allo... |
| CVE-2016-2858 | MEDIUM | 6.5 | 0.4% | Apr 7, 2016 | QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a... |
| CVE-2016-2292 | MEDIUM | 6.5 | 2.3% | Apr 6, 2016 | Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05... |
| CVE-2016-2291 | MEDIUM | 6.5 | 2.2% | Apr 6, 2016 | Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.0... |
| CVE-2016-1160 | MEDIUM | 6.1 | 1.5% | Mar 26, 2016 | Cross-site scripting (XSS) vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attack... |
| CVE-2016-3115 | MEDIUM | 6.4 | 37.0% | Mar 22, 2016 | Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to... |
| CVE-2016-2075 | MEDIUM | 5.4 | 0.8% | Mar 16, 2016 | Cross-site scripting (XSS) vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux a... |
| CVE-2016-0821 | MEDIUM | 5.5 | 0.4% | Mar 12, 2016 | The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-0... |
| CVE-2016-1285 | MEDIUM | 6.8 | 59.0% | Mar 9, 2016 | named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fe... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now