2016 CVE Vulnerabilities
10,648 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-9854 | — | — | 2.2% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is p... |
| CVE-2016-9853 | — | — | 2.5% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is p... |
| CVE-2016-9852 | — | — | 2.2% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is p... |
| CVE-2016-9851 | — | — | 1.3% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to bypass the logout timeou... |
| CVE-2016-9850 | — | — | 2.0% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. Username matching for the allow/deny rules may result in wrong matches and detect... |
| CVE-2016-9849 | — | — | 2.0% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg['Servers'][$i]['AllowRoot'])... |
| CVE-2016-9848 | — | — | 1.3% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. phpinfo (phpinfo.php) shows PHP information including values of HttpOnly cookies.... |
| CVE-2016-9847 | — | — | 2.0% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. When the user does not specify a blowfish_secret key for encrypting cookies, phpM... |
| CVE-2016-6633 | — | — | 4.0% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. phpMyAdmin can be used to trigger a remote code execution attack against certain ... |
| CVE-2016-6632 | — | — | 2.2% | Dec 11, 2016 | An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during ... |
| CVE-2016-6631 | — | — | 4.8% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. A user can execute a remote code execution attack against a server when phpMyAdmi... |
| CVE-2016-6630 | — | — | 2.0% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. An authenticated user can trigger a denial-of-service (DoS) attack by entering a ... |
| CVE-2016-6629 | — | — | 3.1% | Dec 11, 2016 | An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive. An attacker c... |
| CVE-2016-6628 | — | — | 1.1% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. An attacker may be able to trigger a user to download a specially crafted malicio... |
| CVE-2016-6627 | — | — | 1.4% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. An attacker can determine the phpMyAdmin host location through the file url.php. ... |
| CVE-2016-6626 | — | — | 1.3% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. An attacker could redirect a user to a malicious web page. All 4.6.x versions (pr... |
| CVE-2016-6625 | — | — | 1.1% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. An attacker can determine whether a user is logged in to phpMyAdmin. The user's s... |
| CVE-2016-6624 | — | — | 2.0% | Dec 11, 2016 | An issue was discovered in phpMyAdmin involving improper enforcement of the IP-based authentication rules. When phpMyAdm... |
| CVE-2016-6623 | — | — | 1.7% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. An authorized user can cause a denial-of-service (DoS) attack on a server by pass... |
| CVE-2016-6622 | — | — | 1.8% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service (DoS) attack by fo... |
| CVE-2016-6620 | — | — | 3.1% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize() function without verification that i... |
| CVE-2016-6619 | — | — | 1.5% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. In the user interface preference feature, a user can execute an SQL injection att... |
| CVE-2016-6618 | — | — | 1.8% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. The transformation feature allows a user to trigger a denial-of-service (DoS) att... |
| CVE-2016-6617 | — | — | 1.5% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL inje... |
| CVE-2016-6616 | — | — | 1.5% | Dec 11, 2016 | An issue was discovered in phpMyAdmin. In the "User group" and "Designer" features, a user can execute an SQL injection ... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now