2016 CVEs (page 52)
Page 52 of 94 — CVEs published in 2016, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-6325 | High | 7.8 | 2016-10-13 | The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permissions for (1) /etc/sysconfig/tomcat an… |
CVE-2016-5425 | High | 7.8 | 2016-10-13 | The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/li… |
CVE-2016-4407 | Medium | 6.5 | 2016-10-13 | The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures, which allows remote authenticated users to impersonate arbitr… |
CVE-2016-3946 | High | 7.8 | 2016-10-13 | SAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461. |
CVE-2016-3638 | Medium | 5.5 | 2016-10-13 | SAP SLD Registration Program (aka SLDREG) allows local users to cause a denial of service (memory corruption and process termination) via a crafted HOST parame… |
CVE-2016-3635 | High | 7.5 | 2016-10-13 | SAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity (UCON) access control list and execute arbitrary Remote Function… |
CVE-2016-8565 | Critical | 9.1 | 2016-10-13 | Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via… |
CVE-2016-8564 | Medium | 6.5 | 2016-10-13 | SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via c… |
CVE-2016-8563 | High | 7.5 | 2016-10-13 | Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service (ALM service outage) via crafted packets… |
CVE-2016-7960 | Low | 2.5 | 2016-10-13 | Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local us… |
CVE-2016-7959 | Medium | 4.7 | 2016-10-13 | Siemens SIMATIC STEP 7 (TIA Portal) before 14 improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensi… |
CVE-2016-1000216 | High | 8.8 | 2016-10-10 | Ruckus Wireless H500 web management interface authenticated command injection |
CVE-2016-1000155 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin wpsolr-search-engine v7.6 |
CVE-2016-1000154 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin whizz v1.0.7 |
CVE-2016-1000153 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin tidio-gallery v1.1 |
CVE-2016-1000152 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin tidio-form v1.0 |
CVE-2016-1000151 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin tera-charts v1.0 |
CVE-2016-1000150 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin simplified-content v1.0.0 |
CVE-2016-1000149 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin simpel-reserveren v3.5.2 |
CVE-2016-1000148 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin s3-video v0.983 |
CVE-2016-1000147 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin recipes-writer v1.0.4 |
CVE-2016-1000146 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin pondol-formmail v1.1 |
CVE-2016-1000145 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin pondol-carousel v1.0 |
CVE-2016-1000144 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin photoxhibit v2.1.8 |
CVE-2016-1000143 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin photoxhibit v2.1.8 |
CVE-2016-1000142 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin parsi-font v4.2.5 |
CVE-2016-1000141 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin page-layout-builder v1.9.3 |
CVE-2016-1000140 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin new-year-firework v1.1.9 |
CVE-2016-1000139 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin infusionsoft v1.5.11 |
CVE-2016-1000138 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin indexisto v1.0.5 |
CVE-2016-1000137 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin hero-maps-pro v2.1.0 |
CVE-2016-1000136 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin heat-trackr v1.0 |
CVE-2016-1000135 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin hdw-tube v1.2 |
CVE-2016-1000134 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin hdw-tube v1.2 |
CVE-2016-1000133 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1 |
CVE-2016-1000132 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8 |
CVE-2016-1000131 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin e-search v1.0 |
CVE-2016-1000130 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin e-search v1.0 |
CVE-2016-1000129 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin defa-online-image-protector v3.3 |
CVE-2016-1000128 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin anti-plagiarism v3.60 |
CVE-2016-1000127 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin ajax-random-post v2.00 |
CVE-2016-1000126 | Medium | 6.1 | 2016-10-10 | Reflected XSS in wordpress plugin admin-font-editor v1.8 |
CVE-2016-8101 | High | 7.8 | 2016-10-10 | The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via unspecified vectors. |
CVE-2016-8100 | Medium | 5.5 | 2016-10-10 | Intel Integrated Performance Primitives (aka IPP) Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via a side-channel att… |
CVE-2016-7423 | Medium | 4.4 | 2016-10-10 | The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows local guest OS adminis… |
CVE-2016-7099 | Medium | 5.9 | 2016-10-10 | The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle w… |
CVE-2016-5325 | Medium | 6.1 | 2016-10-10 | CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before… |
CVE-2016-7117 | Critical | 9.8 | 2016-10-10 | Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code… |
CVE-2016-6696 | Critical | 9.8 | 2016-10-10 | sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly… |
CVE-2016-6695 | Critical | 9.8 | 2016-10-10 | sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly… |
CVE-2016-6694 | Critical | 9.8 | 2016-10-10 | sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly… |
CVE-2016-6693 | Critical | 9.8 | 2016-10-10 | sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly… |
CVE-2016-6692 | Critical | 9.8 | 2016-10-10 | drivers/video/msm/mdss/mdss_mdp_pp.c in the Qualcomm MDSS driver in Android before 2016-10-05 allows attackers to cause a denial of service (invalid pointer ac… |
CVE-2016-6691 | Critical | 9.8 | 2016-10-10 | service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to cause a denial of… |
CVE-2016-6690 | Medium | 5.5 | 2016-10-10 | The sound driver in the kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Nexus Player devices allows attackers to cause a denia… |
CVE-2016-6689 | Medium | 5.5 | 2016-10-10 | Binder in the kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug… |
CVE-2016-6688 | Medium | 5.5 | 2016-10-10 | The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bu… |
CVE-2016-6687 | Medium | 5.5 | 2016-10-10 | The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bu… |
CVE-2016-6686 | Medium | 5.5 | 2016-10-10 | The NVIDIA profiler in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal bu… |
CVE-2016-6685 | Medium | 5.5 | 2016-10-10 | The kernel in Android before 2016-10-05 on Nexus 6P devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 304026… |
CVE-2016-6684 | Medium | 5.5 | 2016-10-10 | The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attackers to obtain sens… |
CVE-2016-6683 | Medium | 5.5 | 2016-10-10 | The kernel in Android before 2016-10-05 on Nexus devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30143283. |
CVE-2016-6682 | Medium | 5.5 | 2016-10-10 | drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initi… |
CVE-2016-6681 | Medium | 5.5 | 2016-10-10 | drivers/misc/qcom/qdsp6v2/audio_utils.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices does not initi… |
CVE-2016-6680 | High | 7.8 | 2016-10-10 | CORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensitive… |
CVE-2016-6679 | Medium | 5.5 | 2016-10-10 | CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to obtain sensit… |
CVE-2016-6678 | Medium | 5.5 | 2016-10-10 | The Motorola USBNet driver in Android before 2016-10-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka inte… |
CVE-2016-6677 | Medium | 5.5 | 2016-10-10 | The NVIDIA GPU driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka internal… |
CVE-2016-6676 | High | 7.8 | 2016-10-10 | Off-by-one error in CORE/HDD/src/wlan_hdd_cfg.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers… |
CVE-2016-6675 | High | 7.8 | 2016-10-10 | Off-by-one error in CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attack… |
CVE-2016-6674 | High | 7.8 | 2016-10-10 | system_server in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug 30445380. |
CVE-2016-6673 | High | 7.8 | 2016-10-10 | The NVIDIA camera driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 302042… |
CVE-2016-6672 | High | 7.8 | 2016-10-10 | The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application, aka internal b… |
CVE-2016-5348 | Medium | 5.9 | 2016-10-10 | The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middl… |
CVE-2016-5343 | Critical | 9.8 | 2016-10-10 | drivers/soc/qcom/qdsp6v2/voice_svc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contrib… |
CVE-2016-3940 | High | 7.8 | 2016-10-10 | The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices allows attackers to gain privileges via a crafted application… |
CVE-2016-3939 | High | 7.8 | 2016-10-10 | drivers/video/msm/mdss/mdss_debug.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows at… |
CVE-2016-3938 | High | 7.8 | 2016-10-10 | drivers/video/msm/mdss/mdss_mdp_overlay.c in the Qualcomm video driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices all… |
CVE-2016-3937 | High | 7.8 | 2016-10-10 | The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30030994 and Med… |
CVE-2016-3936 | High | 7.8 | 2016-10-10 | The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and Med… |
CVE-2016-3935 | High | 7.8 | 2016-10-10 | Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus… |
CVE-2016-3934 | High | 7.8 | 2016-10-10 | drivers/media/platform/msm/camera_v2/sensor/io/msm_camera_cci_i2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, N… |
CVE-2016-3933 | High | 7.8 | 2016-10-10 | mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 2942140… |
CVE-2016-3932 | High | 7.8 | 2016-10-10 | mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 29161895 and MediaTek internal… |
CVE-2016-3931 | High | 7.8 | 2016-10-10 | drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows att… |
CVE-2016-3930 | High | 7.8 | 2016-10-10 | The NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 2876… |
CVE-2016-3929 | Critical | 9.8 | 2016-10-10 | Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal b… |
CVE-2016-3928 | High | 7.8 | 2016-10-10 | The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019362 and Med… |
CVE-2016-3927 | Critical | 9.8 | 2016-10-10 | Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal b… |
CVE-2016-3926 | Critical | 9.8 | 2016-10-10 | Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5, 5X, 6, and 6P devices has unknown impact and attack vectors, aka int… |
CVE-2016-3925 | Medium | 5.5 | 2016-10-10 | server/wifi/anqp/ANQPFactory.java in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows attackers to cause a denial of service (blocked Wi-Fi usage… |
CVE-2016-3924 | Medium | 5.5 | 2016-10-10 | services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 201… |
CVE-2016-3923 | Medium | 5.5 | 2016-10-10 | The Accessibility services in Android 7.0 before 2016-10-01 mishandle motion events, which allows attackers to conduct touchjacking attacks and consequently ga… |
CVE-2016-3922 | High | 7.8 | 2016-10-10 | libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, which allows attackers to gai… |
CVE-2016-3921 | High | 7.8 | 2016-10-10 | libsysutils/src/FrameworkListener.cpp in Framework Listener in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0… |
CVE-2016-3920 | Medium | 5.5 | 2016-10-10 | id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote… |
CVE-2016-3918 | Medium | 5.5 | 2016-10-10 | email/provider/AttachmentProvider.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before… |
CVE-2016-3917 | High | 7.8 | 2016-10-10 | The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process, w… |
CVE-2016-3916 | High | 7.8 | 2016-10-10 | camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2… |
CVE-2016-3915 | High | 7.8 | 2016-10-10 | camera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2… |