2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-8522 | — | — | 1.1% | Feb 15, 2018 | A cross-site scripting vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found. |
| CVE-2016-8521 | — | — | 3.7% | Feb 15, 2018 | A Remote click jacking vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found. |
| CVE-2016-8520 | — | — | 1.4% | Feb 15, 2018 | HPE Helion Eucalyptus v4.3.0 and earlier does not correctly check IAM user's permissions for accessing versioned objects... |
| CVE-2016-8519 | — | — | 28.1% | Feb 15, 2018 | A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to ... |
| CVE-2016-8518 | — | — | 5.1% | Feb 15, 2018 | A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found. |
| CVE-2016-8517 | — | — | 1.6% | Feb 15, 2018 | A cross site scripting vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found. |
| CVE-2016-8516 | — | — | 5.1% | Feb 15, 2018 | A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found. |
| CVE-2016-8515 | — | — | 2.0% | Feb 15, 2018 | A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem imp... |
| CVE-2016-8514 | — | — | 1.8% | Feb 15, 2018 | A remote information disclosure in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all vers... |
| CVE-2016-8513 | — | — | 0.7% | Feb 15, 2018 | A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The proble... |
| CVE-2016-8512 | — | — | 5.6% | Feb 15, 2018 | A Remote Code Execution vulnerability in all versions of HPE LoadRunner and Performance Center was found. |
| CVE-2016-8511 | — | — | 15.6% | Feb 15, 2018 | A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x,... |
| CVE-2016-10713 | — | — | 1.6% | Feb 13, 2018 | An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly le... |
| CVE-2016-9570 | — | — | 1.0% | Feb 12, 2018 | cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid pointer de... |
| CVE-2016-9569 | — | — | 0.3% | Feb 12, 2018 | The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of servic... |
| CVE-2016-8742 | — | — | 2.0% | Feb 12, 2018 | The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in t... |
| CVE-2016-5397 | — | — | 7.1% | Feb 12, 2018 | The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an e... |
| CVE-2016-10712 | — | — | 2.3% | Feb 9, 2018 | In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be... |
| CVE-2016-6169 | — | — | 5.3% | Feb 7, 2018 | Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to ca... |
| CVE-2016-6168 | — | — | 3.3% | Feb 7, 2018 | Use-after-free vulnerability in Foxit Reader and PhantomPDF 7.3.4.311 and earlier on Windows allows remote attackers to ... |
| CVE-2016-2541 | — | — | 1.2% | Feb 7, 2018 | Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via... |
| CVE-2016-2540 | — | — | 1.9% | Feb 7, 2018 | Audacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via... |
| CVE-2016-3957 | — | — | 5.0% | Feb 6, 2018 | The secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information ... |
| CVE-2016-3954 | — | — | 1.4% | Feb 6, 2018 | web2py before 2.14.2 allows remote attackers to obtain the session_cookie_key value via a direct request to examples/sim... |
| CVE-2016-3953 | — | — | 3.4% | Feb 6, 2018 | The sample web application in web2py before 2.14.2 might allow remote attackers to execute arbitrary code via vectors in... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now