2016 CVE Vulnerabilities
10,647 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-7126 | CRITICAL | 9.8 | 8.8% | Sep 12, 2016 | The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validat... |
| CVE-2016-7125 | — | — | 5.8% | Sep 12, 2016 | ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers inco... |
| CVE-2016-7124 | — | — | 16.5% | Sep 12, 2016 | ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which all... |
| CVE-2016-6375 | — | — | 0.6% | Sep 12, 2016 | Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102... |
| CVE-2016-1469 | HIGH | 7.5 | 2.1% | Sep 12, 2016 | The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (dev... |
| CVE-2016-3899 | — | — | 0.7% | Sep 11, 2016 | OMXCodec.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x b... |
| CVE-2016-3898 | — | — | 0.4% | Sep 11, 2016 | Telephony in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows att... |
| CVE-2016-3897 | — | — | 0.6% | Sep 11, 2016 | The WifiEnterpriseConfig class in net/wifi/WifiEnterpriseConfig.java in Wi-Fi in Android 4.x before 4.4.4, 5.0.x before ... |
| CVE-2016-3896 | — | — | 0.5% | Sep 11, 2016 | AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows attacker... |
| CVE-2016-3895 | — | — | 0.5% | Sep 11, 2016 | Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01... |
| CVE-2016-3894 | — | — | 0.4% | Sep 11, 2016 | The Qualcomm DMA component in Android before 2016-09-05 on Nexus 6 devices allows attackers to obtain sensitive informat... |
| CVE-2016-3893 | — | — | 0.5% | Sep 11, 2016 | The wcdcal_hwdep_ioctl_shared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before ... |
| CVE-2016-3892 | — | — | 0.5% | Sep 11, 2016 | The Qualcomm SPMI driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensi... |
| CVE-2016-3890 | — | — | 0.7% | Sep 11, 2016 | The Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5... |
| CVE-2016-3889 | — | — | 0.2% | Sep 11, 2016 | Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Rese... |
| CVE-2016-3888 | — | — | 0.2% | Sep 11, 2016 | internal/telephony/SMSDispatcher.java in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 20... |
| CVE-2016-3887 | — | — | 0.5% | Sep 11, 2016 | providers/settings/SettingsProvider.java in Android 7.0 before 2016-09-01 does not properly enforce the DISALLOW_CONFIG_... |
| CVE-2016-3886 | — | — | 0.2% | Sep 11, 2016 | systemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before 2016-09-01 does not prev... |
| CVE-2016-3885 | — | — | 1.2% | Sep 11, 2016 | debuggerd/debuggerd.cpp in Debuggerd in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 b... |
| CVE-2016-3884 | — | — | 0.4% | Sep 11, 2016 | server/notification/NotificationManagerService.java in the Notification Manager Service in Android 6.x before 2016-09-01... |
| CVE-2016-3883 | — | — | 0.4% | Sep 11, 2016 | internal/telephony/SMSDispatcher.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, ... |
| CVE-2016-3881 | — | — | 0.9% | Sep 11, 2016 | The decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x ... |
| CVE-2016-3880 | — | — | 0.8% | Sep 11, 2016 | Multiple buffer overflows in rtsp/ASessionDescription.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, ... |
| CVE-2016-3879 | — | — | 0.7% | Sep 11, 2016 | arm-wt-22k/lib_src/eas_mdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.... |
| CVE-2016-3878 | — | — | 0.7% | Sep 11, 2016 | decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which all... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now