2016 CVEs (page 20)
Page 20 of 94 — CVEs published in 2016, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-4849 | Medium | 6.1 | 2017-04-20 | Multiple cross-site scripting (XSS) vulnerabilities in Geeklog IVYWE edition 2.1.1 allow remote attackers to inject arbitrary web script or HTML by leveraging… |
CVE-2016-4847 | Medium | 6.1 | 2017-04-20 | Cross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by levera… |
CVE-2016-4650 | High | 7.8 | 2017-04-20 | Heap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to execute arbitrary code in a… |
CVE-2016-4293 | High | 7.8 | 2017-04-20 | Multiple heap-based buffer overflows in the (1) CBookBase::SetDefTableStyle and (2) CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote… |
CVE-2016-1219 | Critical | 9.8 | 2017-04-20 | Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use. |
CVE-2016-7537 | Medium | 6.5 | 2017-04-19 | MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted PDB file. |
CVE-2016-7533 | Medium | 6.5 | 2017-04-19 | The ReadWPGImage function in coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WPG file. |
CVE-2016-7531 | Medium | 6.5 | 2017-04-19 | MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PDB file. |
CVE-2016-7529 | Medium | 6.5 | 2017-04-19 | coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted XCF file. |
CVE-2016-7528 | Medium | 6.5 | 2017-04-19 | The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted VIFF file. |
CVE-2016-7522 | Medium | 6.5 | 2017-04-19 | The ReadPSDImage function in MagickCore/locale.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD fil… |
CVE-2016-7519 | Medium | 6.5 | 2017-04-19 | The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. |
CVE-2016-7515 | Medium | 6.5 | 2017-04-19 | The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the n… |
CVE-2016-5410 | Medium | 5.5 | 2017-04-19 | firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removeP… |
CVE-2016-10345 | High | 7.8 | 2017-04-18 | In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain th… |
CVE-2016-3038 | Medium | 5.4 | 2017-04-17 | IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alter… |
CVE-2016-3037 | Medium | 5.7 | 2017-04-17 | IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key. An authenticated attacker with user interaction could… |
CVE-2016-3036 | High | 7.5 | 2017-04-17 | IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets. A remote attacker could exploi… |
CVE-2016-0228 | Medium | 5.4 | 2017-04-17 | IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts. An attacker… |
CVE-2016-5396 | High | 7.5 | 2017-04-17 | Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack. |
CVE-2016-7551 | High | 7.5 | 2017-04-17 | chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3 allows remote… |
CVE-2016-6727 | Critical | 9.8 | 2017-04-17 | The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code. |
CVE-2016-6726 | Critical | 9.8 | 2017-04-17 | Unspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices. |
CVE-2016-4874 | Low | 3.5 | 2017-04-17 | Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack. |
CVE-2016-4873 | Medium | 4.3 | 2017-04-17 | Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to execute unintended operations via the Project function. |
CVE-2016-4872 | Medium | 4.3 | 2017-04-17 | Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions to view the names of unauthorized projects via a breadcrumb t… |
CVE-2016-4871 | Medium | 6.5 | 2017-04-17 | Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service. |
CVE-2016-4870 | Medium | 5.4 | 2017-04-17 | Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the Schedu… |
CVE-2016-4869 | Medium | 6.5 | 2017-04-17 | Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed. |
CVE-2016-4868 | Medium | 4.3 | 2017-04-17 | Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via s… |
CVE-2016-4867 | Medium | 4.3 | 2017-04-17 | Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project funct… |
CVE-2016-4866 | Medium | 4.8 | 2017-04-17 | Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the P… |
CVE-2016-4865 | Medium | 4.8 | 2017-04-17 | Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the C… |
CVE-2016-8602 | High | 7.8 | 2017-04-14 | The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execut… |
CVE-2016-7060 | Medium | 4.6 | 2017-04-14 | The web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields, which allows physically proximate attackers to obtain sensiti… |
CVE-2016-7051 | High | 8.6 | 2017-04-14 | XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-si… |
CVE-2016-7032 | High | 7.0 | 2017-04-14 | sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) syst… |
CVE-2016-6489 | High | 7.5 | 2017-04-14 | The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack. |
CVE-2016-6299 | High | 7.8 | 2017-04-14 | The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file. |
CVE-2016-5312 | Medium | 6.5 | 2017-04-14 | Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary fil… |
CVE-2016-5310 | Medium | 5.5 | 2017-04-14 | The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec… |
CVE-2016-5309 | Medium | 5.5 | 2017-04-14 | The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec… |
CVE-2016-4890 | Medium | 5.3 | 2017-04-14 | ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password… |
CVE-2016-4889 | High | 8.8 | 2017-04-14 | ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to un… |
CVE-2016-4888 | Medium | 5.4 | 2017-04-14 | Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via un… |
CVE-2016-4875 | Medium | 6.1 | 2017-04-14 | Multiple cross-site scripting (XSS) vulnerabilities in the IVYWE (1) Assist plugin before 1.1.2.test20160906, (2) dataBox plugin before 0.0.0.20160906, and (3)… |
CVE-2016-4455 | Low | 3.3 | 2017-04-14 | The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directorie… |
CVE-2016-3104 | High | 7.5 | 2017-04-14 | mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service (memory consumption and process termination) by… |
CVE-2016-1713 | High | 7.3 | 2017-04-14 | Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtig… |
CVE-2016-0727 | High | 7.8 | 2017-04-14 | The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 on Ubuntu 14.04 LTS, on… |
CVE-2016-8927 | Medium | 5.4 | 2017-04-14 | IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav… |
CVE-2016-8926 | Medium | 4.3 | 2017-04-14 | IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to read system files or data that is restricted to authorized u… |
CVE-2016-8925 | Medium | 6.5 | 2017-04-14 | IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to include arbitrary files which could allow the attacker to re… |
CVE-2016-10328 | Critical | 9.8 | 2017-04-14 | FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parser_run function in cff/cffparse.c. |
CVE-2016-10327 | Critical | 9.8 | 2017-04-14 | LibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function in vcl/source/… |
CVE-2016-8727 | High | 7.5 | 2017-04-13 | An exploitable information disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point. Retrieving a series of… |
CVE-2016-8726 | High | 7.5 | 2017-04-13 | An exploitable null pointer dereference vulnerability exists in the Web Application /forms/web_runScript iw_filename functionality of Moxa AWK-3131A Wireless A… |
CVE-2016-8725 | Medium | 5.3 | 2017-04-13 | An exploitable information disclosure vulnerability exists in the Web Application functionality of the Moxa AWK-3131A wireless access point running firmware 1… |
CVE-2016-8724 | Medium | 5.3 | 2017-04-13 | An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A sp… |
CVE-2016-8723 | High | 7.5 | 2017-04-13 | An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Any HTTP GET… |
CVE-2016-8722 | Medium | 5.3 | 2017-04-13 | An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless… |
CVE-2016-8720 | Medium | 4.3 | 2017-04-13 | An exploitable HTTP Header Injection vulnerability exists in the Web Application functionality of the Moxa AWK-3131A Wireless Access Point running firmware 1.1… |
CVE-2016-8712 | High | 8.1 | 2017-04-13 | An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP running firmware 1.1. The device uses one no… |
CVE-2016-6818 | Critical | 9.8 | 2017-04-13 | SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cau… |
CVE-2016-7834 | High | 8.8 | 2017-04-13 | SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521… |
CVE-2016-4899 | Critical | 9.8 | 2017-04-13 | The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vector… |
CVE-2016-4898 | Critical | 9.8 | 2017-04-13 | The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vector… |
CVE-2016-1155 | Critical | 9.8 | 2017-04-13 | HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitr… |
CVE-2016-4032 | Medium | 4.6 | 2017-04-13 | Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9… |
CVE-2016-4031 | Medium | 6.8 | 2017-04-13 | Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9… |
CVE-2016-4030 | Medium | 6.8 | 2017-04-13 | Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I9195 build I9… |
CVE-2016-2567 | Low | 3.3 | 2017-04-13 | secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to b… |
CVE-2016-2566 | Critical | 9.8 | 2017-04-13 | Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081. |
CVE-2016-2565 | Low | 3.3 | 2017-04-13 | Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to read sent e-mail messages, aka SVE-2015-5081. |
CVE-2016-2036 | Medium | 5.5 | 2017-04-13 | The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build… |
CVE-2016-10326 | High | 7.5 | 2017-04-13 | In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c… |
CVE-2016-10325 | High | 7.5 | 2017-04-13 | In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser2/osip_me… |
CVE-2016-10324 | Critical | 9.8 | 2017-04-13 | In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c. |
CVE-2016-6143 | Critical | 9.8 | 2017-04-13 | SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806. |
CVE-2016-4970 | High | 7.5 | 2017-04-13 | handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite l… |
CVE-2016-4800 | Critical | 9.8 | 2017-04-13 | The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource rest… |
CVE-2016-4068 | Medium | 6.1 | 2017-04-13 | Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTM… |
CVE-2016-3106 | Medium | 5.3 | 2017-04-13 | Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner. |
CVE-2016-2555 | Critical | 9.8 | 2017-04-13 | SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriend… |
CVE-2016-2104 | Medium | 6.1 | 2017-04-13 | Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the label para… |
CVE-2016-1915 | Medium | 6.1 | 2017-04-13 | Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitr… |
CVE-2016-1914 | High | 8.8 | 2017-04-13 | Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 al… |
CVE-2016-1132 | High | 7.5 | 2017-04-13 | Shoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates. |
CVE-2016-10123 | High | 7.8 | 2017-04-13 | Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges. |
CVE-2016-10122 | High | 7.8 | 2017-04-13 | Firejail does not properly clean environment variables, which allows local users to gain privileges. |
CVE-2016-10121 | High | 7.8 | 2017-04-13 | Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges. |
CVE-2016-10120 | High | 7.8 | 2017-04-13 | Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var/lock, which allows local users to gain privileges. |
CVE-2016-10119 | High | 7.8 | 2017-04-13 | Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges. |
CVE-2016-10118 | Low | 3.3 | 2017-04-13 | Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /. |
CVE-2016-10117 | High | 7.8 | 2017-04-13 | Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc. |
CVE-2016-6348 | Medium | 6.1 | 2017-04-12 | JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack. |
CVE-2016-5856 | High | 7.0 | 2017-04-12 | Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CV… |
CVE-2016-5313 | High | 8.8 | 2017-04-12 | Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands. |
CVE-2016-4897 | Medium | 6.1 | 2017-04-12 | Multiple cross-site scripting (XSS) vulnerabilities in (1) filter/save_forward.cgi, (2) filter/save.cgi, (3) /man/search.cgi in Usermin before 1.690. |
CVE-2016-4896 | Medium | 6.5 | 2017-04-12 | SetsucoCMS all versions does not properly manage sessions, which allows remote attackers to disclose or alter unauthorized information via unspecified vectors. |