2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-10735 | — | — | 4.0% | Jan 9, 2019 | In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a differen... |
| CVE-2016-10502 | — | — | 1.5% | Dec 10, 2018 | While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identit... |
| CVE-2016-8489 | — | — | — | Dec 10, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10242. Reason: This candidate is a reservation... |
| CVE-2016-9749 | MEDIUM | 4 | 0.3% | Nov 9, 2018 | IBM Campaign 9.1.0, 9.1.2, 10.0, and 10.1 could allow an authenticated user with access to the local network to bypass s... |
| CVE-2016-2123 | HIGH | 8.8 | 6.2% | Nov 1, 2018 | A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem... |
| CVE-2016-2120 | HIGH | 7.5 | 2.0% | Nov 1, 2018 | An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an authoriz... |
| CVE-2016-6328 | HIGH | 8.1 | 1.5% | Oct 31, 2018 | A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can ... |
| CVE-2016-2125 | MEDIUM | 6.5 | 9.3% | Oct 31, 2018 | It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos au... |
| CVE-2016-6343 | MEDIUM | 6.1 | 1.7% | Oct 31, 2018 | JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that... |
| CVE-2016-5402 | HIGH | 8.8 | 5.9% | Oct 31, 2018 | A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, auth... |
| CVE-2016-2121 | MEDIUM | 4 | 0.4% | Oct 31, 2018 | A permissions flaw was found in redis, which sets weak permissions on certain files and directories that could potential... |
| CVE-2016-10734 | — | — | 1.5% | Oct 29, 2018 | ProjectSend (formerly cFTP) r582 allows Insecure Direct Object Reference via includes/actions.log.export.php. |
| CVE-2016-10733 | — | — | 2.1% | Oct 29, 2018 | ProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip-download.php query string. |
| CVE-2016-10732 | — | — | 1.9% | Oct 29, 2018 | ProjectSend (formerly cFTP) r582 allows authentication bypass via a direct request for users.php, home.php, edit-file.ph... |
| CVE-2016-10731 | — | — | 1.4% | Oct 29, 2018 | ProjectSend (formerly cFTP) r582 allows SQL injection via manage-files.php with the request parameter status, manage-fil... |
| CVE-2016-10730 | — | — | 0.6% | Oct 24, 2018 | An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. A... |
| CVE-2016-10729 | — | — | 1.2% | Oct 24, 2018 | An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. T... |
| CVE-2016-9069 | — | — | 1.3% | Oct 18, 2018 | A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes. T... |
| CVE-2016-7475 | — | — | 1.3% | Oct 8, 2018 | Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkerne... |
| CVE-2016-9045 | HIGH | 8.8 | 2.2% | Sep 17, 2018 | A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request... |
| CVE-2016-0715 | — | — | 1.2% | Sep 11, 2018 | Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vuln... |
| CVE-2016-7066 | — | — | 0.3% | Sep 11, 2018 | It was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise Application Platform befor... |
| CVE-2016-7074 | MEDIUM | 5.3 | 1.2% | Sep 11, 2018 | An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in... |
| CVE-2016-7073 | MEDIUM | 5.3 | 1.2% | Sep 11, 2018 | An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in... |
| CVE-2016-7070 | HIGH | 8 | 0.6% | Sep 11, 2018 | A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a PostgreSQL database, it in... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now