2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-0713 | — | — | 0.5% | Aug 31, 2017 | Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scriptin... |
| CVE-2016-5001 | — | — | 0.6% | Aug 30, 2017 | This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circui... |
| CVE-2016-6800 | — | — | 3.1% | Aug 30, 2017 | The default configuration of the Apache OFBiz framework offers a blog functionality. Different users are able to operate... |
| CVE-2016-4462 | — | — | 3.8% | Aug 30, 2017 | By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives t... |
| CVE-2016-10507 | — | — | 2.1% | Aug 30, 2017 | Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attac... |
| CVE-2016-10506 | — | — | 3.5% | Aug 30, 2017 | Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in Op... |
| CVE-2016-10505 | — | — | 2.1% | Aug 30, 2017 | NULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb function in color.c, co... |
| CVE-2016-10504 | — | — | 8.3% | Aug 30, 2017 | Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote... |
| CVE-2016-2980 | — | — | 1.0% | Aug 29, 2017 | The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own scr... |
| CVE-2016-2978 | — | — | 0.3% | Aug 29, 2017 | IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be av... |
| CVE-2016-2976 | — | — | 1.0% | Aug 29, 2017 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive informati... |
| CVE-2016-2975 | — | — | 0.7% | Aug 29, 2017 | IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav... |
| CVE-2016-2974 | — | — | 0.3% | Aug 29, 2017 | IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive in... |
| CVE-2016-2967 | — | — | 0.7% | Aug 29, 2017 | IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav... |
| CVE-2016-2966 | — | — | 1.2% | Aug 29, 2017 | IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id.... |
| CVE-2016-2964 | — | — | 1.3% | Aug 29, 2017 | IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may rev... |
| CVE-2016-0358 | — | — | 1.0% | Aug 29, 2017 | IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join me... |
| CVE-2016-8752 | — | — | 2.1% | Aug 29, 2017 | Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp director... |
| CVE-2016-2979 | — | — | 0.8% | Aug 29, 2017 | IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2016-2977 | — | — | 0.9% | Aug 29, 2017 | IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-... |
| CVE-2016-2973 | — | — | 0.8% | Aug 29, 2017 | IBM Sametime Media Services 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2016-2972 | — | — | 0.3% | Aug 29, 2017 | IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of th... |
| CVE-2016-2971 | — | — | 1.3% | Aug 29, 2017 | IBM Sametime Media Services 8.5.2 and 9.0 can disclose sensitive information in stack trace error logs that could aid an... |
| CVE-2016-2969 | — | — | 1.0% | Aug 29, 2017 | IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these mes... |
| CVE-2016-2965 | — | — | 0.8% | Aug 29, 2017 | IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of ... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now