2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-7069 | MEDIUM | 5.9 | 4.5% | Sep 11, 2018 | An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a b... |
| CVE-2016-7068 | MEDIUM | 5.3 | 7.3% | Sep 11, 2018 | An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 3.7.4 and 4.0.4, allowing a re... |
| CVE-2016-7047 | MEDIUM | 4.3 | 1.3% | Sep 11, 2018 | A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReport... |
| CVE-2016-0750 | MEDIUM | 4.2 | 2.4% | Sep 11, 2018 | The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain... |
| CVE-2016-7072 | MEDIUM | 5.3 | 6.3% | Sep 10, 2018 | An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated atta... |
| CVE-2016-9048 | HIGH | 7.4 | 0.8% | Sep 10, 2018 | Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially c... |
| CVE-2016-7061 | LOW | 3.5 | 1.8% | Sep 10, 2018 | An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discover... |
| CVE-2016-7056 | MEDIUM | 5.5 | 0.6% | Sep 10, 2018 | A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recov... |
| CVE-2016-7041 | MEDIUM | 6.5 | 4.0% | Sep 10, 2018 | Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to b... |
| CVE-2016-7035 | HIGH | 8.8 | 0.4% | Sep 10, 2018 | An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attack... |
| CVE-2016-7078 | MEDIUM | 4.3 | 1.4% | Sep 10, 2018 | foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a u... |
| CVE-2016-7077 | MEDIUM | 4.3 | 1.4% | Sep 10, 2018 | foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize opt... |
| CVE-2016-7071 | HIGH | 8.8 | 2.2% | Sep 10, 2018 | It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passe... |
| CVE-2016-7075 | HIGH | 7.5 | 1.6% | Sep 10, 2018 | It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate cert... |
| CVE-2016-7067 | MEDIUM | 6.5 | 0.9% | Sep 10, 2018 | Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an... |
| CVE-2016-9044 | HIGH | 8.8 | 3.8% | Sep 7, 2018 | An exploitable command execution vulnerability exists in Information Builders WebFOCUS Business Intelligence Portal 8.1 ... |
| CVE-2016-9040 | MEDIUM | 5.5 | 0.5% | Sep 7, 2018 | An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerab... |
| CVE-2016-1000232 | — | — | 2.4% | Sep 5, 2018 | NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header pars... |
| CVE-2016-1000030 | — | — | 1.8% | Sep 5, 2018 | Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of retu... |
| CVE-2016-0373 | LOW | 3.1 | 0.8% | Aug 30, 2018 | IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive information due to UCD REST... |
| CVE-2016-0234 | MEDIUM | 4 | 0.3% | Aug 30, 2018 | IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous us... |
| CVE-2016-0205 | LOW | 3.3 | 0.4% | Aug 30, 2018 | A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that could allow an attacke... |
| CVE-2016-9605 | MEDIUM | 6.1 | 0.8% | Aug 22, 2018 | A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnera... |
| CVE-2016-7048 | HIGH | 8.1 | 4.9% | Aug 20, 2018 | The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow remote at... |
| CVE-2016-9598 | MEDIUM | 6.5 | 1.0% | Aug 16, 2018 | libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now