2016 CVE Vulnerabilities

10,656 CVEs published in 2016.

CVE IDSeverityCVSSDescription
CVE-2016-10232——An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Androi...
CVE-2016-10231——An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. ...
CVE-2016-10230——A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android...
CVE-2016-10718——Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial...
CVE-2016-8365——OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Versi...
CVE-2016-7472——F5 BIG-IP ASM version 12.1.0 - 12.1.1 may allow remote attackers to cause a denial of service (DoS) via a crafted HTTP r...
CVE-2016-8717CRITICAL9.8An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running fi...
CVE-2016-6658——Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL poi...
CVE-2016-0898CRITICAL10MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were l...
CVE-2016-9711MEDIUM5.3IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages...
CVE-2016-10717——A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and ...
CVE-2016-9880——The GemFire broker for Cloud Foundry 1.6.x before 1.6.5 and 1.7.x before 1.7.1 has multiple API endpoints which do not r...
CVE-2016-8029——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was...
CVE-2016-10716——The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, r...
CVE-2016-10715——The Artezio Kanban Board plugin 1.4 revision 1914 for Atlassian Jira has XSS via the Board Name in a Create New Board ac...
CVE-2016-0223——Cross-site scripting (XSS) vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0.x, 8.1, and 8.2 all...
CVE-2016-10393——In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when pro...
CVE-2016-9575——Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modify...
CVE-2016-9953——The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using...
CVE-2016-9952HIGH8.1The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using...
CVE-2016-0261——Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0.0 before SP2 EP29, 6.0.4 before 6.0....
CVE-2016-0250——XML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3 before 11.3.1.2 and 11.5 b...
CVE-2016-0237——IBM Security Guardium Database Activity Monitor 10 allows local users to obtain sensitive information by reading cached ...
CVE-2016-0235——IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by leveraging administr...
CVE-2016-9600——JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 ...

Check if your code is affected by 2016 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now