2016 CVE Vulnerabilities

10,656 CVEs published in 2016.

CVE IDSeverityCVSSDescription
CVE-2016-9596MEDIUM6.5libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a...
CVE-2016-9140——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ...
CVE-2016-4975——Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigat...
CVE-2016-2922LOW3.7IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the SS...
CVE-2016-8527——Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS). Th...
CVE-2016-8526——Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to an XML external entities (XXE). XXEs are a...
CVE-2016-4406——A remote cross site scripting vulnerability was identified in HPE iLO 3 all version prior to v1.88 and HPE iLO 4 all ver...
CVE-2016-4405——A remote code execution vulnerability was identified in HP Business Service Management (BSM) using Apache Commons Collec...
CVE-2016-4404——A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability ...
CVE-2016-4403——A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability ...
CVE-2016-4402——A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability ...
CVE-2016-4400——A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch...
CVE-2016-4399——A security vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01 (patch1), 10.01 (patch...
CVE-2016-4398——A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i (NNMi) Software 10.00, 10.01...
CVE-2016-4397——A local code execution security vulnerability was identified in HP Network Node Manager i (NNMi) v10.00, v10.10 and v10....
CVE-2016-4392——A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 ...
CVE-2016-4391——A remote code execution security vulnerability has been identified in all versions of the HP ArcSight WINC Connector pri...
CVE-2016-8640——A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any...
CVE-2016-9583MEDIUM5.5An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when process...
CVE-2016-8609LOW3.7It was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this ...
CVE-2016-9580LOW3.3An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.
CVE-2016-9579MEDIUM6.5A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to a...
CVE-2016-9572MEDIUM5.9A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error i...
CVE-2016-8654HIGH7.8A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small...
CVE-2016-8651LOW3.1An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manife...

Check if your code is affected by 2016 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now