2016 CVE Vulnerabilities
10,647 CVEs published in 2016.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2016-10595 | HIGH | 8.1 | 1.6% | Jun 1, 2018 | jdf-sass is a fork from node-sass, jdf use only. jdf-sass downloads executable resources over HTTP, which leaves it vuln... |
| CVE-2016-10583 | HIGH | 8.1 | 2.5% | Jun 1, 2018 | closure-utils is Utilities for Closure Library based projects. closure-utils downloads binary resources over HTTP, which... |
| CVE-2016-10560 | HIGH | 8.1 | 1.7% | May 31, 2018 | galenframework-cli is the node wrapper for the Galen Framework. galenframework-cli below 2.3.1 download binary resources... |
| CVE-2016-10524 | HIGH | 8.2 | 0.8% | May 31, 2018 | i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API e... |
| CVE-2016-10521 | HIGH | 7.5 | 1.1% | May 31, 2018 | jshamcrest is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in t... |
| CVE-2016-10520 | HIGH | 7.5 | 1.2% | May 31, 2018 | jadedown is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in. |
| CVE-2016-10680 | HIGH | 8.1 | 0.7% | May 29, 2018 | adamvr-geoip-lite is a light weight native JavaScript implementation of GeoIP API from MaxMind adamvr-geoip-lite downloa... |
| CVE-2016-10658 | HIGH | 8.1 | 1.7% | May 29, 2018 | native-opencv is the OpenCV library installed via npm native-opencv downloads binary resources over HTTP, which leaves i... |
| CVE-2016-8656 | HIGH | 7 | 0.4% | May 22, 2018 | Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script ... |
| CVE-2016-9602 | HIGH | 7.6 | 3.8% | Apr 26, 2018 | Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside... |
| CVE-2016-9043 | HIGH | 7.8 | 2.8% | Apr 24, 2018 | An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 (CdrGfx - Corel Graphics Eng... |
| CVE-2016-9038 | HIGH | 7.8 | 0.3% | Apr 24, 2018 | An exploitable double fetch vulnerability exists in the SboxDrv.sys driver functionality of Invincea-X 6.1.3-24058. A sp... |
| CVE-2016-8732 | HIGH | 7.8 | 0.6% | Apr 24, 2018 | Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303. We... |
| CVE-2016-8730 | HIGH | 7.8 | 2.2% | Apr 24, 2018 | An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.... |
| CVE-2016-8729 | HIGH | 7.8 | 1.7% | Apr 24, 2018 | An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF ... |
| CVE-2016-8728 | HIGH | 7.8 | 1.9% | Apr 24, 2018 | An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A... |
| CVE-2016-8384 | HIGH | 8.8 | 1.5% | Apr 24, 2018 | An exploitable heap corruption vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter. |
| CVE-2016-8383 | HIGH | 8.8 | 2.2% | Apr 24, 2018 | An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC HTMLFilter... |
| CVE-2016-8382 | HIGH | 8.3 | 2.1% | Apr 24, 2018 | An exploitable heap corruption vulnerability exists in the Doc_SetSummary functionality of AntennaHouse DMC HTMLFilter. ... |
| CVE-2016-9587 | HIGH | 8.1 | 17.9% | Apr 24, 2018 | Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent fr... |
| CVE-2016-9599 | HIGH | 7.1 | 0.9% | Apr 24, 2018 | puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, wh... |
| CVE-2016-9952 | HIGH | 8.1 | 1.3% | Mar 12, 2018 | The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using... |
| CVE-2016-10708 | HIGH | 7.5 | 16.0% | Jan 21, 2018 | sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cra... |
| CVE-2016-10707 | HIGH | 7.5 | 2.9% | Jan 18, 2018 | jQuery 3.0.0-rc.1 is vulnerable to Denial of Service (DoS) due to removing a logic that lowercased attribute names. Any ... |
| CVE-2016-6914 | HIGH | 7.8 | 1.2% | Dec 27, 2017 | Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local u... |
Check if your code is affected by 2016 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now