2016 CVE Vulnerabilities
10,648 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-2836 | — | — | 2.9% | Aug 5, 2016 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45... |
| CVE-2016-2835 | — | — | 2.9% | Aug 5, 2016 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow remote attackers to caus... |
| CVE-2016-2830 | — | — | 1.5% | Aug 5, 2016 | Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource r... |
| CVE-2016-6300 | — | — | — | Aug 4, 2016 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2016-5671 | — | — | 0.9% | Aug 3, 2016 | Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware... |
| CVE-2016-5670 | — | — | 3.2% | Aug 3, 2016 | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for th... |
| CVE-2016-5669 | — | — | 1.6% | Aug 3, 2016 | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded 0xb9eed4d955a59eb3 X.509 ... |
| CVE-2016-5668 | — | — | 4.4% | Aug 3, 2016 | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authenti... |
| CVE-2016-5667 | — | — | 4.4% | Aug 3, 2016 | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authenti... |
| CVE-2016-5666 | — | — | 4.2% | Aug 3, 2016 | Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authenticat... |
| CVE-2016-5640 | — | — | 17.7% | Aug 3, 2016 | Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.1... |
| CVE-2016-5639 | — | — | 20.8% | Aug 3, 2016 | Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13... |
| CVE-2016-4833 | — | — | 1.8% | Aug 3, 2016 | Cross-site scripting (XSS) vulnerability in the Nofollow Links plugin before 1.0.11 for WordPress allows remote attacker... |
| CVE-2016-6259 | — | — | 0.6% | Aug 2, 2016 | Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and e... |
| CVE-2016-6258 | — | — | 0.4% | Aug 2, 2016 | The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain h... |
| CVE-2016-6232 | — | — | 4.5% | Aug 2, 2016 | Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write t... |
| CVE-2016-6193 | — | — | 0.9% | Aug 2, 2016 | Buffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363 allows attackers to ca... |
| CVE-2016-6192 | — | — | 0.8% | Aug 2, 2016 | Buffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363 allows attackers to ca... |
| CVE-2016-6178 | — | — | 3.0% | Aug 2, 2016 | Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007S... |
| CVE-2016-5403 | MEDIUM | 5.5 | 0.5% | Aug 2, 2016 | The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of servi... |
| CVE-2016-5229 | — | — | 7.1% | Aug 2, 2016 | Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, w... |
| CVE-2016-2408 | — | — | 0.4% | Aug 2, 2016 | Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted... |
| CVE-2016-1712 | — | — | 0.4% | Aug 2, 2016 | Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before... |
| CVE-2016-6257 | MEDIUM | 6.5 | 1.0% | Aug 2, 2016 | The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboa... |
| CVE-2016-6185 | HIGH | 7.8 | 0.8% | Aug 2, 2016 | The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which mig... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now