2016 CVE Vulnerabilities

10,656 CVEs published in 2016.

CVE IDSeverityCVSSDescription
CVE-2016-10596——imageoptim is a Node.js wrapper for some images compression algorithms. imageoptim downloads zipped resources over HTTP,...
CVE-2016-10595HIGH8.1jdf-sass is a fork from node-sass, jdf use only. jdf-sass downloads executable resources over HTTP, which leaves it vuln...
CVE-2016-10594——ipip is a Node.js module to query geolocation information for an IP or domain, based on database by ipip.net. ipip downl...
CVE-2016-10592——jser-stat is a JSer.info stat library. jser-stat downloads data resources over HTTP, which leaves it vulnerable to MITM ...
CVE-2016-10588——nw is an installer for nw.js. nw downloads zipped resources over HTTP, It may be possible to cause remote code execution...
CVE-2016-10587——wasdk is a toolkit for creating WebAssembly modules. wasdk downloads binary resources over HTTP, which leaves it vulnera...
CVE-2016-10585——libxl provides Node bindings for the libxl library for reading and writing excel (XLS and XLSX) spreadsheets. libxl down...
CVE-2016-10583HIGH8.1closure-utils is Utilities for Closure Library based projects. closure-utils downloads binary resources over HTTP, which...
CVE-2016-10582——closurecompiler is a Closure Compiler for node.js. closurecompiler downloads binary resources over HTTP, which leaves it...
CVE-2016-10581——Steroids is PhoneGap on Steroids, providing native UI elements, multiple WebViews and enhancements for better developer ...
CVE-2016-10580——nodewebkit is an installer for node-webkit. nodewebkit downloads zipped resources over HTTP, which leaves it vulnerable ...
CVE-2016-10579——Chromedriver is an NPM wrapper for selenium ChromeDriver. Chromedriver before 2.26.1 downloads binary resources over HTT...
CVE-2016-10576——Fuseki server wrapper and management API in fuseki before 1.0.1 downloads binary resources over HTTP, which leaves it vu...
CVE-2016-10575——Kindlegen is a simple Node.js wrapper of the official kindlegen program. Kindlegen versions before 1.1.0 download binary...
CVE-2016-10574——apk-parser3 is a module to extract Android Manifest info from an APK file. apk-parser3 versions before 0.1.3 download bi...
CVE-2016-10572——mongodb-instance before 0.0.3 installs mongodb locally. mongodb-instance downloads binary resources over HTTP, which lea...
CVE-2016-10571——bkjs-wand is imagemagick wand support for node.js and backendjs bkjs-wand versions lower than 0.3.2 download binary reso...
CVE-2016-10569——embedza is a module to create HTML snippets/embeds from URLs using info from oEmbed, Open Graph, meta tags. embedza vers...
CVE-2016-10565——operadriver is a Opera Driver for Selenium. operadriver versions below 0.2.3 download binary resources over HTTP, which ...
CVE-2016-10564——apk-parser is a tool to extract Android Manifest info from an APK file. apk-parser versions below 0.1.6 download binary ...
CVE-2016-10563——During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. This all...
CVE-2016-10562——iedriver is an NPM wrapper for Selenium IEDriver. iedriver versions below 3.0.0 download binary resources over HTTP, whi...
CVE-2016-10561——Bitty is a development web server tool that functions similar to `python -m SimpleHTTPServer`. Version 0.2.10 has a dire...
CVE-2016-10560HIGH8.1galenframework-cli is the node wrapper for the Galen Framework. galenframework-cli below 2.3.1 download binary resources...
CVE-2016-10557——appium-chromedriver is a Node.js wrapper around Chromedriver. Versions below 2.9.4 download binary resources over HTTP, ...

Check if your code is affected by 2016 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now