2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-20034 | HIGH | 8 | 0.2% | Mar 16, 2026 | Wowza Streaming Engine 4.5.0 contains a privilege escalation vulnerability that allows authenticated read-only users to ... |
| CVE-2016-20033 | HIGH | 8.5 | 0.2% | Mar 16, 2026 | Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users to esca... |
| CVE-2016-20032 | HIGH | 7.2 | 0.3% | Mar 16, 2026 | ZKTeco ZKAccess Security System 5.3.1 contains a stored cross-site scripting vulnerability that allows attackers to exec... |
| CVE-2016-20025 | HIGH | 8.8 | 0.4% | Mar 16, 2026 | ZKTeco ZKAccess Professional 3.5.3 contains an insecure file permissions vulnerability that allows authenticated users t... |
| CVE-2016-15056 | HIGH | 8.7 | 0.6% | Nov 14, 2025 | Ubee EVW3226 cable modem/routers firmware versions up to and including 1.0.20 store configuration backup files in the we... |
| CVE-2016-15055 | HIGH | 8.7 | 0.8% | Nov 12, 2025 | JVC VN-T IP-camera models firmware versions up to 2016-08-22 (confirmed on the VN-T216VPRU model) contain a directory tr... |
| CVE-2016-15050 | HIGH | 8.8 | 1.1% | Oct 30, 2025 | Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality. User-s... |
| CVE-2016-15047 | HIGH | 8.7 | 4.0% | Oct 9, 2025 | AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection.... |
| CVE-2016-15046 | HIGH | 8.6 | 0.9% | Jul 25, 2025 | A client-side remote code execution vulnerability exists in Hanwha Techwin Smart Security Manager (SSM) versions 1.32 an... |
| CVE-2016-15045 | HIGH | 8.5 | 0.4% | Jul 23, 2025 | A local privilege escalation vulnerability exists in lastore-daemon, the system package manager daemon used in Deepin Li... |
| CVE-2016-10408 | HIGH | 7.8 | 0.1% | Nov 26, 2024 | QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. ... |
| CVE-2016-10394 | HIGH | 7.8 | 0.1% | Nov 26, 2024 | Initial xbl_sec revision does not have all the debug policy features and critical checks. |
| CVE-2016-20022 | HIGH | 8.4 | 0.2% | Jun 27, 2024 | In the Linux kernel before 4.8, usb_parse_endpoint in drivers/usb/core/config.c does not validate the wMaxPacketSize fie... |
| CVE-2016-15036 | HIGH | 7.5 | 0.4% | Dec 23, 2023 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Deis Workflow Manager up to 2.3.2. It has been classified a... |
| CVE-2016-1203 | HIGH | 8.1 | 0.6% | Oct 31, 2023 | Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0... |
| CVE-2016-15026 | HIGH | 7.8 | 0.5% | Feb 20, 2023 | A vulnerability was found in 3breadt dd-plist 1.17 and classified as problematic. Affected by this issue is some unknown... |
| CVE-2016-15019 | HIGH | 7.5 | 0.7% | Jan 15, 2023 | A vulnerability was found in tombh jekbox. It has been rated as problematic. This issue affects some unknown processing ... |
| CVE-2016-15009 | HIGH | 8.8 | 0.3% | Jan 5, 2023 | A vulnerability classified as problematic has been found in OpenACS bug-tracker. Affected is an unknown function of the ... |
| CVE-2016-15005 | HIGH | 8.8 | 0.4% | Dec 27, 2022 | CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an ... |
| CVE-2016-20018 | HIGH | 7.5 | 0.8% | Dec 19, 2022 | Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of... |
| CVE-2016-20015 | HIGH | 7.5 | 0.5% | Sep 20, 2022 | In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to ga... |
| CVE-2016-4427 | HIGH | 7.5 | 0.6% | Jul 28, 2022 | In zulip before 1.3.12, deactivated users could access messages if SSO was enabled. |
| CVE-2016-0796 | HIGH | 7.5 | 1.0% | Jul 28, 2022 | WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, inclu... |
| CVE-2016-15003 | HIGH | 7.8 | 0.7% | Jul 18, 2022 | A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects un... |
| CVE-2016-15002 | HIGH | 8.8 | 0.9% | Jun 9, 2022 | A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of th... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now