2016 CVEs (page 21)
Page 21 of 94 — CVEs published in 2016, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-4895 | High | 8.8 | 2017-04-12 | SetsucoCMS all versions allows remote authenticated attackers to conduct code injection attacks via unspecified vectors. |
CVE-2016-4894 | Medium | 5.3 | 2017-04-12 | SetsucoCMS all versions allows remote attackers to cause a denial of service via unspecified vectors. |
CVE-2016-4893 | High | 8.8 | 2017-04-12 | SQL injection vulnerability in the SetsucoCMS all versions allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. |
CVE-2016-4892 | Medium | 6.1 | 2017-04-12 | Cross-site scripting vulnerability in SetsucoCMS all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2016-4891 | High | 8.8 | 2017-04-12 | Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change s… |
CVE-2016-4337 | Critical | 9.8 | 2017-04-12 | SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the e… |
CVE-2016-2803 | Medium | 6.1 | 2017-04-12 | Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject… |
CVE-2016-1179 | Medium | 6.1 | 2017-04-12 | Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attacke… |
CVE-2016-1178 | Medium | 6.5 | 2017-04-12 | The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via u… |
CVE-2016-9959 | High | 7.8 | 2017-04-12 | game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. |
CVE-2016-9958 | High | 7.8 | 2017-04-12 | game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations. |
CVE-2016-9957 | High | 7.8 | 2017-04-12 | Stack-based buffer overflow in game-music-emu before 0.6.1. |
CVE-2016-6808 | Critical | 9.8 | 2017-04-12 | Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42. |
CVE-2016-4459 | High | 7.5 | 2017-04-12 | Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9. |
CVE-2016-8719 | Medium | 6.1 | 2017-04-12 | An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmwar… |
CVE-2016-8718 | High | 8.8 | 2017-04-12 | An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1… |
CVE-2016-8716 | High | 7.5 | 2017-04-12 | An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running fir… |
CVE-2016-7958 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/CMakeLists… |
CVE-2016-7957 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors… |
CVE-2016-7552 | Critical | 9.8 | 2017-04-12 | On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to… |
CVE-2016-7547 | Critical | 9.8 | 2017-04-12 | A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface. |
CVE-2016-5322 | Medium | 5.5 | 2017-04-11 | The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif… |
CVE-2016-4989 | High | 7.0 | 2017-04-11 | setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with… |
CVE-2016-4446 | High | 7.0 | 2017-04-11 | The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filenam… |
CVE-2016-4445 | High | 7.0 | 2017-04-11 | The fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial… |
CVE-2016-4444 | High | 7.0 | 2017-04-11 | The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a craft… |
CVE-2016-1908 | Critical | 9.8 | 2017-04-11 | The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisio… |
CVE-2016-4483 | High | 7.5 | 2017-04-11 | The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and appl… |
CVE-2016-0779 | Critical | 9.8 | 2017-04-11 | The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized… |
CVE-2016-5011 | Medium | 4.6 | 2017-04-11 | The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (m… |
CVE-2016-4468 | High | 8.8 | 2017-04-11 | SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; UAA BOSH before 11.2… |
CVE-2016-7467 | Medium | 5.3 | 2017-04-11 | The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provi… |
CVE-2016-6811 | High | 8.8 | 2017-04-11 | In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. |
CVE-2016-10259 | Medium | 5.9 | 2017-04-11 | Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerability that impacts th… |
CVE-2016-8237 | High | 8.1 | 2017-04-10 | Remote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle attackers to execute arbitrary code. |
CVE-2016-8235 | High | 7.8 | 2017-04-10 | Privilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier than 2.0.16.3 allows local users to execute code with elevated p… |
CVE-2016-10323 | High | 7.8 | 2017-04-10 | Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophoto_dsm_user --copy-no-ea" command. |
CVE-2016-10322 | High | 8.8 | 2017-04-10 | Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HT… |
CVE-2016-5041 | High | 7.5 | 2017-04-10 | dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry us… |
CVE-2016-6879 | High | 7.5 | 2017-04-10 | The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more tha… |
CVE-2016-6878 | Critical | 9.8 | 2017-04-10 | The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to have unspecified impact via vectors rel… |
CVE-2016-10311 | Critical | 9.8 | 2017-04-10 | Stack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a denial of service () by sending a crafted packet to the SAPSTAR… |
CVE-2016-10310 | Medium | 4.9 | 2017-04-10 | Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated users to cause a denia… |
CVE-2016-6605 | High | 7.5 | 2017-04-10 | Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization. |
CVE-2016-10321 | Critical | 9.8 | 2017-04-10 | web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks. |
CVE-2016-10304 | Medium | 6.5 | 2017-04-10 | The SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to cause a denial of service (out-of-memory error and service insta… |
CVE-2016-6534 | High | 7.5 | 2017-04-10 | Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affec… |
CVE-2016-5682 | Medium | 6.1 | 2017-04-10 | Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section. |
CVE-2016-5642 | Medium | 5.4 | 2017-04-10 | Opmantek NMIS before 8.5.12G has XSS via SNMP. |
CVE-2016-5078 | Medium | 6.1 | 2017-04-10 | Paessler PRTG before 16.2.24.4045 has XSS via SNMP. |
CVE-2016-5077 | Medium | 6.1 | 2017-04-10 | Netikus EventSentry before 3.2.1.44 has XSS via SNMP. |
CVE-2016-5076 | High | 7.5 | 2017-04-10 | CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def. |
CVE-2016-5075 | Medium | 6.1 | 2017-04-10 | CloudView NMS before 2.10a has XSS via a TELNET login. |
CVE-2016-5074 | Critical | 9.8 | 2017-04-10 | CloudView NMS before 2.10a has a format string issue exploitable over SNMP. |
CVE-2016-5073 | Medium | 6.1 | 2017-04-10 | CloudView NMS before 2.10a has XSS via SNMP. |
CVE-2016-5072 | High | 8.8 | 2017-04-10 | OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edi… |
CVE-2016-5071 | High | 8.8 | 2017-04-10 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root. |
CVE-2016-5070 | Critical | 9.8 | 2017-04-10 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext. |
CVE-2016-5069 | Critical | 9.8 | 2017-04-10 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are in the URL. |
CVE-2016-5068 | Critical | 9.8 | 2017-04-10 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for Embedded_Ace_Get_Task.cgi requests. |
CVE-2016-5067 | High | 8.8 | 2017-04-10 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection. |
CVE-2016-5066 | Critical | 9.8 | 2017-04-10 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser, sconsole, and user. |
CVE-2016-5065 | Critical | 9.8 | 2017-04-10 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command injection. |
CVE-2016-5059 | Medium | 6.5 | 2017-04-10 | OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under /private/var/mobile/Container… |
CVE-2016-5058 | High | 7.5 | 2017-04-10 | OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay. |
CVE-2016-5057 | High | 7.5 | 2017-04-10 | OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning. |
CVE-2016-5056 | High | 7.5 | 2017-04-10 | OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK. |
CVE-2016-5055 | Medium | 6.1 | 2017-04-10 | OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode configuration page. |
CVE-2016-5054 | High | 7.5 | 2017-04-10 | OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay. |
CVE-2016-5053 | Critical | 9.8 | 2017-04-10 | OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000. |
CVE-2016-5052 | High | 7.5 | 2017-04-10 | OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning. |
CVE-2016-5051 | High | 7.5 | 2017-04-10 | OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application. |
CVE-2016-4334 | Medium | 6.1 | 2017-04-10 | Jive before 2016.3.1 has an open redirect from the external-link.jspa page. |
CVE-2016-4320 | Medium | 4.3 | 2017-04-10 | Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull reques… |
CVE-2016-4319 | High | 8.8 | 2017-04-10 | Atlassian JIRA Server before 7.1.9 has CSRF in auditing/settings. |
CVE-2016-4318 | Medium | 4.8 | 2017-04-10 | Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name. |
CVE-2016-4317 | Medium | 5.4 | 2017-04-10 | Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page. |
CVE-2016-1517 | Medium | 5.5 | 2017-04-10 | OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks. |
CVE-2016-1516 | High | 8.8 | 2017-04-10 | OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code. |
CVE-2016-7786 | High | 8.8 | 2017-04-07 | Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via direct object reference, as demonstrated b… |
CVE-2016-6805 | Medium | 5.9 | 2017-04-07 | Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents. |
CVE-2016-9197 | Medium | 6.7 | 2017-04-07 | A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attac… |
CVE-2016-9196 | Medium | 6.7 | 2017-04-07 | A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local atta… |
CVE-2016-9195 | Medium | 5.3 | 2017-04-07 | A vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless LAN Controller (WLC) could allow an unauthenticated, remote at… |
CVE-2016-1000307 | Medium | 6.1 | 2017-04-06 | Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via (… |
CVE-2016-8735 | Critical | 9.8 | 2017-04-06 | Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRe… |
CVE-2016-6809 | Critical | 9.8 | 2017-04-06 | Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native d… |
CVE-2016-5349 | Medium | 5.5 | 2017-04-06 | The high level operating systems (HLOS) was not providing sufficient memory address information to ensure that secure applications inside Qualcomm Secure Execu… |
CVE-2016-9219 | High | 7.5 | 2017-04-06 | A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to caus… |
CVE-2016-9194 | Medium | 6.5 | 2017-04-06 | A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthent… |
CVE-2016-10320 | High | 7.8 | 2017-04-06 | textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be a remote attack if a web application ac… |
CVE-2016-10319 | Medium | 5.9 | 2017-04-06 | In ARM Trusted Firmware 1.2 and 1.3, a malformed firmware update SMC can result in copying unexpectedly large data into secure memory because of integer overfl… |
CVE-2016-6100 | High | 8.8 | 2017-04-05 | IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable… |
CVE-2016-3031 | Medium | 5.4 | 2017-04-05 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering… |
CVE-2016-3015 | Medium | 5.4 | 2017-04-05 | IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering… |
CVE-2016-9091 | High | 7.2 | 2017-04-05 | Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vuln… |
CVE-2016-5870 | High | 7.8 | 2017-04-04 | The msm_ipc_router_close function in net/ipc_router/ipc_router_socket.c in the ipc_router component for the Linux kernel 3.x, as used in Qualcomm Innovation Ce… |
CVE-2016-3740 | High | 7.8 | 2017-04-04 | Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to execute arbitrary… |
CVE-2016-10318 | Medium | 6.5 | 2017-04-04 | A missing authorization check in the fscrypt_process_policy function in fs/crypto/policy.c in the ext4 and f2fs filesystem encryption support in the Linux kern… |
CVE-2016-10229 | Critical | 9.8 | 2017-04-04 | udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation duri… |