2016 CVE Vulnerabilities
10,648 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-7109 | — | — | 3.5% | Sep 7, 2016 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands vi... |
| CVE-2016-7108 | — | — | 1.1% | Sep 7, 2016 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the M... |
| CVE-2016-7107 | — | — | 1.2% | Sep 7, 2016 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user p... |
| CVE-2016-6900 | — | — | 0.2% | Sep 7, 2016 | The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC61... |
| CVE-2016-6899 | — | — | 1.0% | Sep 7, 2016 | The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC61... |
| CVE-2016-6898 | — | — | 0.8% | Sep 7, 2016 | XML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack servers with software ... |
| CVE-2016-6876 | — | — | 1.6% | Sep 7, 2016 | The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, ... |
| CVE-2016-6839 | — | — | 0.8% | Sep 7, 2016 | CRLF injection vulnerability in Huawei FusionAccess before V100R006C00 allows remote attackers to inject arbitrary HTTP ... |
| CVE-2016-6838 | — | — | 1.0% | Sep 7, 2016 | Huawei X6800 and XH620 V3 servers with software before V100R003C00SPC606, RH1288 V3 servers with software before V100R00... |
| CVE-2016-6825 | — | — | 2.1% | Sep 7, 2016 | Huawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3 servers with software ... |
| CVE-2016-6670 | — | — | 0.8% | Sep 7, 2016 | Huawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random numbers with insufficie... |
| CVE-2016-6317 | — | — | 3.9% | Sep 7, 2016 | Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between... |
| CVE-2016-6316 | — | — | 3.4% | Sep 7, 2016 | Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.... |
| CVE-2016-6184 | — | — | 0.2% | Sep 7, 2016 | The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CH... |
| CVE-2016-6183 | — | — | 0.2% | Sep 7, 2016 | The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CH... |
| CVE-2016-6182 | — | — | 0.6% | Sep 7, 2016 | The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CH... |
| CVE-2016-6181 | — | — | 0.2% | Sep 7, 2016 | The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CH... |
| CVE-2016-6180 | — | — | 0.2% | Sep 7, 2016 | The Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564, CHM-TL00C01 before CH... |
| CVE-2016-5422 | — | — | 2.1% | Sep 7, 2016 | The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users... |
| CVE-2016-5022 | — | — | 3.5% | Sep 7, 2016 | F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 ... |
| CVE-2016-1242 | — | — | 1.8% | Sep 7, 2016 | file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 al... |
| CVE-2016-1241 | — | — | 1.6% | Sep 7, 2016 | Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remot... |
| CVE-2016-7034 | — | — | 1.1% | Sep 7, 2016 | The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated during an active session... |
| CVE-2016-7033 | — | — | 1.5% | Sep 7, 2016 | Multiple cross-site scripting (XSS) vulnerabilities in the admin pages in dashbuilder in Red Hat JBoss BPM Suite 6.3.2 a... |
| CVE-2016-6855 | — | — | 18.9% | Sep 7, 2016 | Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib befor... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now