2016 CVE Vulnerabilities
10,648 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-3468 | — | — | 5.5% | Jul 21, 2016 | Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suit... |
| CVE-2016-3467 | — | — | 3.2% | Jul 21, 2016 | Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote atta... |
| CVE-2016-3459 | — | — | 3.3% | Jul 21, 2016 | Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 an... |
| CVE-2016-3458 | — | — | 3.0% | Jul 21, 2016 | Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to... |
| CVE-2016-3453 | — | — | 0.4% | Jul 21, 2016 | Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to Kern... |
| CVE-2016-3452 | — | — | 3.5% | Jul 21, 2016 | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB bef... |
| CVE-2016-3451 | — | — | 1.9% | Jul 21, 2016 | Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote att... |
| CVE-2016-3450 | — | — | 1.9% | Jul 21, 2016 | Unspecified vulnerability in the Siebel Core - Server Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2... |
| CVE-2016-3448 | — | — | 1.7% | Jul 21, 2016 | Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote atta... |
| CVE-2016-3446 | — | — | 2.3% | Jul 21, 2016 | Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 1... |
| CVE-2016-3445 | — | — | 4.2% | Jul 21, 2016 | Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allo... |
| CVE-2016-3444 | — | — | 5.5% | Jul 21, 2016 | Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Retail Applications 13.0, 13.1, 13.2,... |
| CVE-2016-3440 | — | — | 3.2% | Jul 21, 2016 | Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability vi... |
| CVE-2016-3433 | — | — | 1.2% | Jul 21, 2016 | Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 1... |
| CVE-2016-3432 | — | — | 1.2% | Jul 21, 2016 | Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 11.1.1.7.0 ... |
| CVE-2016-3424 | — | — | 2.2% | Jul 21, 2016 | Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vec... |
| CVE-2016-0635 | — | — | 5.1% | Jul 21, 2016 | Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.... |
| CVE-2016-5655 | — | — | 0.6% | Jul 19, 2016 | Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attac... |
| CVE-2016-5654 | — | — | 1.6% | Jul 19, 2016 | Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that ... |
| CVE-2016-5653 | — | — | 1.1% | Jul 19, 2016 | Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arb... |
| CVE-2016-5080 | — | — | 10.1% | Jul 19, 2016 | Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allow... |
| CVE-2016-2775 | MEDIUM | 5.9 | 63.3% | Jul 19, 2016 | ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option... |
| CVE-2016-5388 | — | — | 50.9% | Jul 19, 2016 | Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18... |
| CVE-2016-5387 | HIGH | 8.1 | 55.7% | Jul 19, 2016 | The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from t... |
| CVE-2016-5386 | HIGH | 8.1 | 5.2% | Jul 19, 2016 | The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and there... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now