2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-10528 | — | — | 1.2% | May 31, 2018 | restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Re... |
| CVE-2016-10527 | — | — | 1.6% | May 31, 2018 | The riot-compiler version version 2.3.21 has an issue in a regex (Catastrophic Backtracking) thats make it unusable unde... |
| CVE-2016-10526 | — | — | 1.6% | May 31, 2018 | A common setup to deploy to gh-pages on every commit via a CI system is to expose a github token to ENV and to use it di... |
| CVE-2016-10524 | HIGH | 8.2 | 0.8% | May 31, 2018 | i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API e... |
| CVE-2016-10523 | — | — | 2.5% | May 31, 2018 | MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS... |
| CVE-2016-10521 | HIGH | 7.5 | 1.1% | May 31, 2018 | jshamcrest is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in t... |
| CVE-2016-10520 | HIGH | 7.5 | 1.2% | May 31, 2018 | jadedown is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in. |
| CVE-2016-10519 | — | — | 1.6% | May 31, 2018 | A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a... |
| CVE-2016-10518 | — | — | 2.0% | May 31, 2018 | A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memo... |
| CVE-2016-10698 | — | — | 1.8% | May 29, 2018 | mystem-fix is a node.js wrapper for MyStem morphology text analyzer by Yandex.ru mystem-fix downloads binary resources o... |
| CVE-2016-10682 | — | — | 1.7% | May 29, 2018 | massif is a Phantomjs fork massif downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be p... |
| CVE-2016-10681 | — | — | 1.8% | May 29, 2018 | roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary... |
| CVE-2016-10680 | HIGH | 8.1 | 0.7% | May 29, 2018 | adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloa... |
| CVE-2016-10679 | — | — | 2.0% | May 29, 2018 | selenium-standalone-painful installs a start-selenium command line to start a standalone selenium server with chrome-dri... |
| CVE-2016-10674 | — | — | 1.7% | May 29, 2018 | limbus-buildgen is a "build anywhere" build system. limbus-buildgen versions below 0.1.1 download binary resources over ... |
| CVE-2016-10666 | — | — | 1.7% | May 29, 2018 | tomita-parser is a Node wrapper for Yandex Tomita Parser tomita-parser downloads binary resources over HTTP, which leave... |
| CVE-2016-10659 | — | — | 1.8% | May 29, 2018 | poco - The POCO libraries, downloads source file resources used for compilation over HTTP, which leaves it vulnerable to... |
| CVE-2016-10658 | HIGH | 8.1 | 1.7% | May 29, 2018 | native-opencv is the OpenCV library installed via npm native-opencv downloads binary resources over HTTP, which leaves i... |
| CVE-2016-10650 | — | — | 1.8% | May 29, 2018 | ntfserver is a Network Testing Framework Server. ntfserver downloads binary resources over HTTP, which leaves it vulnera... |
| CVE-2016-10635 | — | — | 1.7% | May 29, 2018 | broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources ove... |
| CVE-2016-10627 | — | — | 1.8% | May 29, 2018 | scala-bin is a binary wrapper for Scala. scala-bin downloads binary resources over HTTP, which leaves it vulnerable to M... |
| CVE-2016-10611 | — | — | 1.8% | May 29, 2018 | strider-sauce is Sauce Labs / Selenium support for Strider. strider-sauce downloads zipped resources over HTTP, which le... |
| CVE-2016-10601 | — | — | 1.7% | May 29, 2018 | webdrvr is a npm wrapper for Selenium Webdriver including Chromedriver / IEDriver / IOSDriver / Ghostdriver. webdrvr dow... |
| CVE-2016-10593 | — | — | 2.3% | May 29, 2018 | ibapi is an Interactive Brokers API addon for NodeJS. ibapi downloads binary resources over HTTP, which leaves it vulner... |
| CVE-2016-10591 | — | — | 1.8% | May 29, 2018 | Prince is a Node API for executing XML/HTML to PDF renderer PrinceXML via prince(1) CLI. prince downloads zipped resourc... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now