2016 CVE Vulnerabilities
10,647 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-0048 | — | — | 2.1% | Feb 10, 2016 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, ... |
| CVE-2016-0047 | — | — | 20.6% | Feb 10, 2016 | WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensit... |
| CVE-2016-0046 | — | — | 25.9% | Feb 10, 2016 | Windows Reader in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to exec... |
| CVE-2016-0044 | — | — | 14.2% | Feb 10, 2016 | Sync Framework in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows remote attackers to cause a d... |
| CVE-2016-0042 | — | — | 5.7% | Feb 10, 2016 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an... |
| CVE-2016-0041 | — | — | 84.2% | Feb 10, 2016 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an... |
| CVE-2016-0040 | HIGH | 7.8 | 24.6% | Feb 10, 2016 | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to g... |
| CVE-2016-0039 | — | — | 6.9% | Feb 10, 2016 | Cross-site scripting (XSS) vulnerability in SharePoint Server in Microsoft SharePoint Foundation 2013 SP1 allows remote ... |
| CVE-2016-0038 | — | — | 18.5% | Feb 10, 2016 | Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows ... |
| CVE-2016-0037 | — | — | 26.3% | Feb 10, 2016 | The forms-based authentication implementation in Active Directory Federation Services (ADFS) 3.0 in Microsoft Windows Se... |
| CVE-2016-0036 | — | — | 11.4% | Feb 10, 2016 | The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R... |
| CVE-2016-0033 | — | — | 18.1% | Feb 10, 2016 | Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 does not prevent recursive compilation of XSLT trans... |
| CVE-2016-0022 | — | — | 19.5% | Feb 10, 2016 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, ... |
| CVE-2016-1319 | — | — | 0.8% | Feb 9, 2016 | Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.100... |
| CVE-2016-1318 | — | — | 1.0% | Feb 9, 2016 | Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-E... |
| CVE-2016-1317 | — | — | 1.2% | Feb 9, 2016 | Cisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to obtain sensitive database ta... |
| CVE-2016-1316 | — | — | 1.5% | Feb 9, 2016 | Cisco TelePresence Video Communication Server (VCS) X8.1 through X8.7, as used in conjunction with Jabber Guest, allows ... |
| CVE-2016-2268 | — | — | 0.8% | Feb 8, 2016 | Dell SecureWorks app before 2.1 for iOS does not validate SSL certificates, which allows man-in-the-middle attackers to ... |
| CVE-2016-2214 | — | — | 0.8% | Feb 8, 2016 | Cross-site scripting (XSS) vulnerability in an unspecified portal authentication page in Huawei Agile Controller-Campus ... |
| CVE-2016-2091 | LOW | 3.3 | 0.9% | Feb 8, 2016 | The dwarf_read_cie_fde_prefix function in dwarf_frame2.c in libdwarf 20151114 allows attackers to cause a denial of serv... |
| CVE-2016-2089 | — | — | 2.6% | Feb 8, 2016 | The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invali... |
| CVE-2016-2048 | — | — | 1.5% | Feb 8, 2016 | Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended ... |
| CVE-2016-2230 | — | — | 3.6% | Feb 8, 2016 | OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers ... |
| CVE-2016-2201 | — | — | 2.9% | Feb 8, 2016 | Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via pack... |
| CVE-2016-2200 | — | — | 6.4% | Feb 8, 2016 | Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transiti... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now