2016 CVE Vulnerabilities
10,648 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-0756 | — | — | 2.1% | Jan 29, 2016 | The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields whe... |
| CVE-2016-0755 | — | — | 9.3% | Jan 29, 2016 | The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy co... |
| CVE-2016-0754 | — | — | 1.1% | Jan 29, 2016 | cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a differe... |
| CVE-2016-0738 | — | — | 3.8% | Jan 29, 2016 | OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close serv... |
| CVE-2016-0737 | — | — | 3.8% | Jan 29, 2016 | OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers ... |
| CVE-2016-1882 | — | — | 1.9% | Jan 29, 2016 | FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service (kernel ... |
| CVE-2016-1879 | — | — | 13.9% | Jan 29, 2016 | The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, w... |
| CVE-2016-3197 | — | — | — | Jan 29, 2016 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-3197. Reason: This candidate is a duplicate of... |
| CVE-2016-0868 | — | — | 6.6% | Jan 28, 2016 | Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 1... |
| CVE-2016-1300 | — | — | 0.8% | Jan 27, 2016 | Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject a... |
| CVE-2016-1299 | — | — | 1.3% | Jan 27, 2016 | The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a d... |
| CVE-2016-2047 | — | — | 3.8% | Jan 27, 2016 | The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x b... |
| CVE-2016-1983 | — | — | 2.8% | Jan 27, 2016 | The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (inv... |
| CVE-2016-1982 | — | — | 2.7% | Jan 27, 2016 | The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a den... |
| CVE-2016-1924 | — | — | 3.4% | Jan 27, 2016 | The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds rea... |
| CVE-2016-1923 | — | — | 2.3% | Jan 27, 2016 | Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to ca... |
| CVE-2016-1896 | — | — | 3.3% | Jan 27, 2016 | Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.04... |
| CVE-2016-0209 | — | — | 1.0% | Jan 27, 2016 | Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject arb... |
| CVE-2016-1926 | — | — | 1.6% | Jan 26, 2016 | Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 all... |
| CVE-2016-1567 | — | — | 2.6% | Jan 26, 2016 | chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets,... |
| CVE-2016-1492 | — | — | 1.8% | Jan 26, 2016 | The Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Android, when configured to receive files, does not require a pa... |
| CVE-2016-1491 | — | — | 2.5% | Jan 26, 2016 | The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password ... |
| CVE-2016-1490 | — | — | 1.7% | Jan 26, 2016 | The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a... |
| CVE-2016-1489 | — | — | 1.8% | Jan 26, 2016 | Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allo... |
| CVE-2016-1233 | — | — | 0.4% | Jan 26, 2016 | An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in ... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now