2016 CVE Vulnerabilities
10,648 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-6530 | — | — | 3.1% | Sep 21, 2016 | Dentsply Sirona (formerly Schick) CDR Dicom 5 and earlier has default passwords for the sa and cdr accounts, which allow... |
| CVE-2016-4384 | — | — | 3.6% | Sep 21, 2016 | HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via ... |
| CVE-2016-4382 | — | — | 2.2% | Sep 21, 2016 | HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restricti... |
| CVE-2016-0925 | — | — | 1.1% | Sep 21, 2016 | Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premi... |
| CVE-2016-0921 | — | — | 0.4% | Sep 21, 2016 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use weak permissions for ... |
| CVE-2016-0920 | — | — | 0.4% | Sep 21, 2016 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obta... |
| CVE-2016-0917 | — | — | 4.2% | Sep 21, 2016 | The SMB service in EMC VNXe (VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100/3150/3300 Operating Envi... |
| CVE-2016-0905 | — | — | 0.4% | Sep 21, 2016 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obta... |
| CVE-2016-0904 | — | — | 1.4% | Sep 21, 2016 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use the same encryption k... |
| CVE-2016-0903 | — | — | 3.4% | Sep 21, 2016 | Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 rely on client-side authe... |
| CVE-2016-6802 | — | — | 9.7% | Sep 20, 2016 | Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non... |
| CVE-2016-6662 | — | — | 67.7% | Sep 20, 2016 | Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.2... |
| CVE-2016-6537 | — | — | 1.3% | Sep 19, 2016 | AVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext base64 format and require... |
| CVE-2016-6536 | — | — | 2.6% | Sep 19, 2016 | The /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote attackers to bypass inte... |
| CVE-2016-6535 | — | — | 2.3% | Sep 19, 2016 | AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which allows remote attackers t... |
| CVE-2016-6415 | HIGH | 7.5 | 87.7% | Sep 19, 2016 | The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x... |
| CVE-2016-5814 | — | — | 4.7% | Sep 19, 2016 | Buffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer, RSLogix 500 Starter Edition,... |
| CVE-2016-4860 | — | — | 2.6% | Sep 19, 2016 | Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, ... |
| CVE-2016-4526 | — | — | 0.3% | Sep 19, 2016 | ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directo... |
| CVE-2016-1483 | — | — | 1.9% | Sep 19, 2016 | Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU consumption) by repeatedly acc... |
| CVE-2016-0870 | — | — | 1.2% | Sep 19, 2016 | The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via... |
| CVE-2016-6405 | — | — | 1.2% | Sep 18, 2016 | Cisco Fog Director 1.0(0) for IOx allows remote authenticated users to bypass intended access restrictions and write to ... |
| CVE-2016-6404 | — | — | 1.0% | Sep 18, 2016 | Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allo... |
| CVE-2016-6403 | — | — | 1.6% | Sep 18, 2016 | The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remot... |
| CVE-2016-6402 | — | — | 0.4% | Sep 18, 2016 | UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users ... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now