2016 CVE Vulnerabilities
10,648 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-4073 | — | — | 7.3% | May 20, 2016 | Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6... |
| CVE-2016-4072 | — | — | 5.9% | May 20, 2016 | The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute ar... |
| CVE-2016-4071 | — | — | 19.5% | May 20, 2016 | Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20,... |
| CVE-2016-4070 | — | — | 5.7% | May 20, 2016 | Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and... |
| CVE-2016-1859 | — | — | 2.6% | May 20, 2016 | The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote att... |
| CVE-2016-1858 | — | — | 2.2% | May 20, 2016 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attribute... |
| CVE-2016-1857 | — | — | 2.9% | May 20, 2016 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execut... |
| CVE-2016-1856 | — | — | 2.6% | May 20, 2016 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execut... |
| CVE-2016-1855 | — | — | 1.9% | May 20, 2016 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execut... |
| CVE-2016-1854 | — | — | 2.6% | May 20, 2016 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execut... |
| CVE-2016-1853 | — | — | 2.5% | May 20, 2016 | Tcl in Apple OS X before 10.11.5 allows remote attackers to obtain sensitive information by leveraging SSLv2 support. |
| CVE-2016-1852 | — | — | 0.3% | May 20, 2016 | Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows physi... |
| CVE-2016-1851 | — | — | 0.4% | May 20, 2016 | The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate att... |
| CVE-2016-1850 | — | — | 2.2% | May 20, 2016 | SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (me... |
| CVE-2016-1849 | — | — | 0.3% | May 20, 2016 | The "Clear History and Website Data" feature in Apple Safari before 9.1.1, as used in iOS before 9.3.2 and other product... |
| CVE-2016-1848 | — | — | 5.5% | May 20, 2016 | QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (m... |
| CVE-2016-1847 | — | — | 2.0% | May 20, 2016 | OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remo... |
| CVE-2016-1846 | — | — | 4.8% | May 20, 2016 | The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows a... |
| CVE-2016-1844 | — | — | 1.9% | May 20, 2016 | The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify c... |
| CVE-2016-1843 | — | — | 2.5% | May 20, 2016 | The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtai... |
| CVE-2016-1842 | — | — | 2.3% | May 20, 2016 | MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, whi... |
| CVE-2016-1841 | — | — | 2.4% | May 20, 2016 | libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows rem... |
| CVE-2016-1840 | — | — | 3.3% | May 20, 2016 | Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9... |
| CVE-2016-1839 | — | — | 7.4% | May 20, 2016 | The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS befo... |
| CVE-2016-1838 | — | — | 6.6% | May 20, 2016 | The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 1... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now