2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-9581 | LOW | 3.3 | 2.0% | Aug 1, 2018 | An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openj... |
| CVE-2016-8653 | MEDIUM | 5.3 | 1.9% | Aug 1, 2018 | It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it... |
| CVE-2016-8648 | HIGH | 7.2 | 2.0% | Aug 1, 2018 | It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects p... |
| CVE-2016-8641 | MEDIUM | 6.7 | 1.1% | Aug 1, 2018 | A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary fil... |
| CVE-2016-8608 | MEDIUM | 5.4 | 1.3% | Aug 1, 2018 | JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplet... |
| CVE-2016-8639 | MEDIUM | 6.1 | 1.2% | Aug 1, 2018 | It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could a... |
| CVE-2016-8637 | MEDIUM | 5 | 0.3% | Aug 1, 2018 | A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable... |
| CVE-2016-8635 | MEDIUM | 5.3 | 2.0% | Aug 1, 2018 | It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement... |
| CVE-2016-8634 | MEDIUM | 6.1 | 1.1% | Aug 1, 2018 | A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains ... |
| CVE-2016-9573 | MEDIUM | 6.5 | 2.6% | Aug 1, 2018 | An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafte... |
| CVE-2016-8625 | MEDIUM | 5.3 | 4.3% | Aug 1, 2018 | curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users... |
| CVE-2016-8623 | LOW | 3.3 | 2.6% | Aug 1, 2018 | A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-afte... |
| CVE-2016-8620 | MEDIUM | 6.5 | 4.4% | Aug 1, 2018 | The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read vi... |
| CVE-2016-8619 | MEDIUM | 5.3 | 5.0% | Aug 1, 2018 | The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free. |
| CVE-2016-8616 | LOW | 3.7 | 3.5% | Aug 1, 2018 | A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons o... |
| CVE-2016-8615 | MEDIUM | 5.3 | 4.5% | Aug 1, 2018 | A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back ... |
| CVE-2016-8621 | MEDIUM | 5.3 | 4.9% | Jul 31, 2018 | The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input... |
| CVE-2016-8617 | LOW | 3.3 | 0.6% | Jul 31, 2018 | The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if ... |
| CVE-2016-8624 | MEDIUM | 5.3 | 5.9% | Jul 31, 2018 | curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with ... |
| CVE-2016-8622 | LOW | 3.7 | 4.7% | Jul 31, 2018 | The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if th... |
| CVE-2016-8618 | MEDIUM | 5.3 | 4.6% | Jul 31, 2018 | The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to a... |
| CVE-2016-8614 | MEDIUM | 6.3 | 2.5% | Jul 31, 2018 | A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing... |
| CVE-2016-8631 | MEDIUM | 6.3 | 1.1% | Jul 31, 2018 | The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with acc... |
| CVE-2016-8628 | HIGH | 7.6 | 3.3% | Jul 31, 2018 | Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker wit... |
| CVE-2016-8613 | MEDIUM | 6.4 | 2.4% | Jul 31, 2018 | A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI. ... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now