2016 CVE Vulnerabilities
10,656 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-10766 | HIGH | 8.8 | 0.6% | Jul 29, 2019 | edx-platform before 2016-06-06 allows CSRF. |
| CVE-2016-1587 | HIGH | 7.1 | 1.1% | Apr 22, 2019 | The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling... |
| CVE-2016-1573 | HIGH | 7.8 | 0.4% | Apr 22, 2019 | Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in p... |
| CVE-2016-9778 | HIGH | 7.5 | 6.8% | Jan 16, 2019 | An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature... |
| CVE-2016-2123 | HIGH | 8.8 | 6.2% | Nov 1, 2018 | A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem... |
| CVE-2016-2120 | HIGH | 7.5 | 2.0% | Nov 1, 2018 | An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an authoriz... |
| CVE-2016-6328 | HIGH | 8.1 | 1.5% | Oct 31, 2018 | A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can ... |
| CVE-2016-5402 | HIGH | 8.8 | 5.9% | Oct 31, 2018 | A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, auth... |
| CVE-2016-9045 | HIGH | 8.8 | 2.2% | Sep 17, 2018 | A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request... |
| CVE-2016-7070 | HIGH | 8 | 0.6% | Sep 11, 2018 | A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a PostgreSQL database, it in... |
| CVE-2016-9048 | HIGH | 7.4 | 0.8% | Sep 10, 2018 | Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially c... |
| CVE-2016-7035 | HIGH | 8.8 | 0.4% | Sep 10, 2018 | An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attack... |
| CVE-2016-7071 | HIGH | 8.8 | 2.2% | Sep 10, 2018 | It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passe... |
| CVE-2016-7075 | HIGH | 7.5 | 1.6% | Sep 10, 2018 | It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate cert... |
| CVE-2016-9044 | HIGH | 8.8 | 3.8% | Sep 7, 2018 | An exploitable command execution vulnerability exists in Information Builders WebFOCUS Business Intelligence Portal 8.1 ... |
| CVE-2016-7048 | HIGH | 8.1 | 4.9% | Aug 20, 2018 | The interactive installer in PostgreSQL before 9.3.15, 9.4.x before 9.4.10, and 9.5.x before 9.5.5 might allow remote at... |
| CVE-2016-8654 | HIGH | 7.8 | 1.9% | Aug 1, 2018 | A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small... |
| CVE-2016-8648 | HIGH | 7.2 | 2.0% | Aug 1, 2018 | It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects p... |
| CVE-2016-8628 | HIGH | 7.6 | 3.3% | Jul 31, 2018 | Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker wit... |
| CVE-2016-9578 | HIGH | 7.5 | 2.5% | Jul 27, 2018 | A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to... |
| CVE-2016-9577 | HIGH | 7.5 | 3.8% | Jul 27, 2018 | A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker coul... |
| CVE-2016-9595 | HIGH | 7.3 | 0.4% | Jul 27, 2018 | A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A loca... |
| CVE-2016-9487 | HIGH | 7.8 | 1.3% | Jul 13, 2018 | EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation.... |
| CVE-2016-6578 | HIGH | 8.8 | 0.9% | Jul 13, 2018 | CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability... |
| CVE-2016-9079 | HIGH | 7.5 | 87.9% | Jun 11, 2018 | A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been dis... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now