2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-2774 | MEDIUM | 5.9 | 73.7% | Mar 9, 2016 | ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessio... |
| CVE-2016-0702 | MEDIUM | 5.1 | 1.9% | Mar 3, 2016 | The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g... |
| CVE-2016-2279 | MEDIUM | 6.1 | 7.5% | Mar 2, 2016 | Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* bef... |
| CVE-2016-0763 | MEDIUM | 6.3 | 11.3% | Feb 25, 2016 | The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.... |
| CVE-2016-0706 | MEDIUM | 4.3 | 6.2% | Feb 25, 2016 | Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache... |
| CVE-2016-2388 | MEDIUM | 5.3 | 51.6% | Feb 16, 2016 | The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user infor... |
| CVE-2016-0753 | MEDIUM | 5.3 | 7.2% | Feb 16, 2016 | Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use... |
| CVE-2016-0747 | MEDIUM | 5.3 | 8.4% | Feb 15, 2016 | The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote... |
| CVE-2016-2073 | MEDIUM | 6.5 | 2.7% | Feb 12, 2016 | The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bound... |
| CVE-2016-1144 | MEDIUM | 5.4 | 0.9% | Jan 30, 2016 | Cross-site scripting (XSS) vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 ... |
| CVE-2016-0502 | MEDIUM | 6.5 | 3.1% | Jan 21, 2016 | Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to... |
| CVE-2016-0777 | MEDIUM | 6.5 | 63.5% | Jan 14, 2016 | The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote serv... |
| CVE-2016-0032 | MEDIUM | 6.1 | 7.6% | Jan 13, 2016 | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulat... |
| CVE-2016-0031 | MEDIUM | 6.1 | 7.7% | Jan 13, 2016 | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote att... |
| CVE-2016-0030 | MEDIUM | 6.1 | 7.6% | Jan 13, 2016 | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2013 PS1, 2013 Cumulat... |
| CVE-2016-0029 | MEDIUM | 6.1 | 7.6% | Jan 13, 2016 | Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2016 allows remote att... |
| CVE-2016-0012 | MEDIUM | 4.3 | 10.9% | Jan 13, 2016 | Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 20... |
| CVE-2016-0011 | MEDIUM | 5.4 | 5.3% | Jan 13, 2016 | Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass inten... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now