2016 CVE Vulnerabilities
10,647 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-6377 | — | — | 1.3% | Sep 3, 2016 | Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to... |
| CVE-2016-5430 | MEDIUM | 5.3 | 1.7% | Sep 3, 2016 | The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling ... |
| CVE-2016-5429 | LOW | 3.7 | 1.3% | Sep 3, 2016 | jose-php before 2.2.1 does not use constant-time operations for HMAC comparison, which makes it easier for remote attack... |
| CVE-2016-1464 | — | — | 10.0% | Sep 3, 2016 | Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code ... |
| CVE-2016-1415 | — | — | 5.6% | Sep 3, 2016 | Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of servi... |
| CVE-2016-7123 | — | — | 1.5% | Sep 2, 2016 | Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote at... |
| CVE-2016-6893 | — | — | 1.6% | Sep 2, 2016 | Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows remot... |
| CVE-2016-5879 | — | — | 0.4% | Sep 2, 2016 | MQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell commands via a crafted (... |
| CVE-2016-5699 | — | — | 9.9% | Sep 2, 2016 | CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) befo... |
| CVE-2016-5636 | — | — | 25.7% | Sep 2, 2016 | Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.... |
| CVE-2016-5107 | MEDIUM | 6 | 0.4% | Sep 2, 2016 | The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allo... |
| CVE-2016-5106 | MEDIUM | 6 | 0.4% | Sep 2, 2016 | The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Ada... |
| CVE-2016-5105 | MEDIUM | 4.4 | 0.4% | Sep 2, 2016 | The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter e... |
| CVE-2016-4952 | MEDIUM | 6 | 0.4% | Sep 2, 2016 | QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS a... |
| CVE-2016-0772 | — | — | 14.5% | Sep 2, 2016 | The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an e... |
| CVE-2016-6483 | — | — | 11.9% | Sep 2, 2016 | The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Le... |
| CVE-2016-4853 | — | — | 1.5% | Sep 2, 2016 | AKABEi SOFT2 games allow remote attackers to execute arbitrary OS commands via crafted saved data, as demonstrated by Ha... |
| CVE-2016-4851 | — | — | 1.2% | Sep 2, 2016 | Cross-site scripting (XSS) vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject a... |
| CVE-2016-4848 | — | — | 1.6% | Sep 2, 2016 | Cross-site scripting (XSS) vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web ... |
| CVE-2016-6376 | — | — | 0.9% | Sep 2, 2016 | The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8... |
| CVE-2016-1473 | — | — | 4.0% | Sep 2, 2016 | Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attac... |
| CVE-2016-1472 | — | — | 2.9% | Sep 2, 2016 | The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attack... |
| CVE-2016-1471 | — | — | 1.5% | Sep 2, 2016 | Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with ... |
| CVE-2016-1470 | — | — | 1.0% | Sep 2, 2016 | Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 device... |
| CVE-2016-6298 | MEDIUM | 5.3 | 2.2% | Sep 1, 2016 | The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling pro... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now