2016 CVEs (page 8)
Page 8 of 94 — CVEs published in 2016, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-9573 | Medium | 6.5 | 2018-08-01 | An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could… |
CVE-2016-8625 | Medium | 5.3 | 2018-08-01 | curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue n… |
CVE-2016-8623 | Low | 3.3 | 2018-08-01 | A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to information disclosur… |
CVE-2016-8620 | Medium | 6.5 | 2018-08-01 | The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input. |
CVE-2016-8619 | Medium | 5.3 | 2018-08-01 | The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free. |
CVE-2016-8616 | Low | 3.7 | 2018-08-01 | A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and password with the exist… |
CVE-2016-8615 | Medium | 5.3 | 2018-08-01 | A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a mal… |
CVE-2016-8621 | Medium | 5.3 | 2018-07-31 | The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short. |
CVE-2016-8617 | Low | 3.3 | 2018-07-31 | The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `… |
CVE-2016-8624 | Medium | 5.3 | 2018-07-31 | curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be t… |
CVE-2016-8622 | Low | 3.7 | 2018-07-31 | The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a… |
CVE-2016-8618 | Medium | 5.3 | 2018-07-31 | The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on sy… |
CVE-2016-8614 | Medium | 6.3 | 2018-07-31 | A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP… |
CVE-2016-8631 | Medium | 6.3 | 2018-07-31 | The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with access to create routes can potentially ov… |
CVE-2016-8628 | High | 7.6 | 2018-07-31 | Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variabl… |
CVE-2016-8613 | Medium | 6.4 | 2018-07-31 | A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI. When a job is submitted that contains H… |
CVE-2016-8611 | Medium | 4.3 | 2018-07-31 | A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image service for both v1 and v2 `/images` API POST method for authenti… |
CVE-2016-8657 | High | 7.8 | 2018-07-31 | It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. T… |
CVE-2016-8626 | Medium | 6.5 | 2018-07-31 | A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial… |
CVE-2016-9597 | High | 7.5 | 2018-07-30 | It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making… |
CVE-2016-9603 | Medium | 5.5 | 2018-07-27 | A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client… |
CVE-2016-9578 | High | 7.5 | 2018-07-27 | A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted me… |
CVE-2016-9577 | High | 7.5 | 2018-07-27 | A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE se… |
CVE-2016-9595 | High | 7.3 | 2018-07-27 | A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to condu… |
CVE-2016-8647 | Medium | 4.9 | 2018-07-26 | An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstanc… |
CVE-2016-5649 | Critical | 9.8 | 2018-07-24 | A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, wh… |
CVE-2016-5638 | High | 7.5 | 2018-07-24 | There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877. Genie app adds some capabilities ove… |
CVE-2016-10728 | Medium | 5.3 | 2018-07-23 | An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it confuses t… |
CVE-2016-10727 | Critical | 9.8 | 2018-07-20 | camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a passwo… |
CVE-2016-9574 | Medium | 5.9 | 2018-07-19 | nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA. |
CVE-2016-9500 | Medium | 6.1 | 2018-07-13 | Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName… |
CVE-2016-9499 | Medium | 5.3 | 2018-07-13 | Accellion FTP server prior to version FTA_9_12_220 only returns the username in the server response if the username is invalid. An attacker may use this inform… |
CVE-2016-9498 | Critical | 9.8 | 2018-07-13 | ManageEngine Applications Manager 12 and 13 before build 13200, allows unserialization of unsafe Java objects. The vulnerability can be exploited by remote use… |
CVE-2016-9497 | High | 8.8 | 2018-07-13 | Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or chan… |
CVE-2016-9496 | Medium | 6.5 | 2018-07-13 | Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET reques… |
CVE-2016-9495 | High | 8.8 | 2018-07-13 | Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, uses hard coded credentials. Access to the device's default telnet port (… |
CVE-2016-9494 | Medium | 6.5 | 2018-07-13 | Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validation. The device's adv… |
CVE-2016-9493 | Medium | 6.1 | 2018-07-13 | The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In the generated form.lib.php file, upload… |
CVE-2016-9492 | Critical | 9.8 | 2018-07-13 | The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous file types. In the generated form.lib… |
CVE-2016-9491 | Medium | 4.9 | 2018-07-13 | ManageEngine Applications Manager 12 and 13 before build 13690 allows an authenticated user, who is able to access /register.do page (most likely limited to ad… |
CVE-2016-9489 | High | 8.8 | 2018-07-13 | In ManageEngine Applications Manager 12 and 13 before build 13200, an authenticated user is able to alter all of their own properties, including own group, i.e… |
CVE-2016-9487 | High | 7.8 | 2018-07-13 | EpubCheck 4.0.1 does not properly restrict resolving external entities when parsing XML in EPUB files during validation. An attacker who supplies a specially c… |
CVE-2016-9486 | High | 7.8 | 2018-07-13 | On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality… |
CVE-2016-9485 | High | 7.8 | 2018-07-13 | On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality… |
CVE-2016-9484 | High | 7.5 | 2018-07-13 | The generated PHP form code does not properly validate user input folder directories, allowing a remote unauthenticated attacker to perform a path traversal an… |
CVE-2016-9483 | Critical | 9.8 | 2018-07-13 | The PHP form code generated by PHP FormMail Generator deserializes untrusted input as part of the phpfmg_filman_download() function. A remote unauthenticated a… |
CVE-2016-9482 | Critical | 9.8 | 2018-07-13 | Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by navigatin… |
CVE-2016-6578 | High | 8.8 | 2018-07-13 | CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with… |
CVE-2016-6567 | Critical | 9.8 | 2018-07-13 | SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some… |
CVE-2016-6566 | Critical | 9.8 | 2018-07-13 | The valueAsString parameter inside the JSON payload contained by the ucLogin_txtLoginId_ClientStat POST parameter of the Sungard eTRAKiT3 software version 3.2… |
CVE-2016-6565 | High | 7.5 | 2018-07-13 | The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request… |
CVE-2016-6564 | High | 8.1 | 2018-07-13 | Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks. Additionally, there are multiple techniques… |
CVE-2016-6563 | Critical | 9.8 | 2018-07-13 | Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML f… |
CVE-2016-6562 | High | 7.5 | 2018-07-13 | On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which… |
CVE-2016-6559 | Critical | 9.8 | 2018-07-13 | Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or write from mem… |
CVE-2016-6558 | Critical | 9.8 | 2018-07-13 | A command injection vulnerability exists in apply.cgi on the ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, web interface specifica… |
CVE-2016-6557 | High | 8.8 | 2018-07-13 | In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a… |
CVE-2016-6554 | Critical | 9.8 | 2018-07-13 | Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of… |
CVE-2016-6553 | Critical | 9.8 | 2018-07-13 | Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attack… |
CVE-2016-6552 | Critical | 9.8 | 2018-07-13 | Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device. |
CVE-2016-6551 | Critical | 9.8 | 2018-07-13 | Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote n… |
CVE-2016-6549 | Medium | 4.3 | 2018-07-13 | The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attri… |
CVE-2016-6548 | Critical | 9.8 | 2018-07-13 | The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker… |
CVE-2016-6547 | High | 7.8 | 2018-07-13 | The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. |
CVE-2016-6546 | High | 7.8 | 2018-07-13 | The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encodi… |
CVE-2016-6545 | Critical | 9.8 | 2018-07-13 | Session cookies are not used for maintaining valid sessions in iTrack Easy. The user's password is passed as a POST parameter over HTTPS using a base64 encoded… |
CVE-2016-6544 | High | 7.5 | 2018-07-13 | getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited t… |
CVE-2016-6543 | Medium | 5.9 | 2018-07-13 | A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated p… |
CVE-2016-6542 | Low | 3.7 | 2018-07-13 | The iTrack device tracking ID number, also called "LosserID" in the web API, can be obtained by being in the range of an iTrack device. The tracker ID is the d… |
CVE-2016-0708 | Medium | 5.9 | 2018-07-11 | Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but not limited to envi… |
CVE-2016-9604 | Medium | 4.4 | 2018-07-11 | It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_t… |
CVE-2016-10726 | High | 7.5 | 2018-07-10 | The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitr… |
CVE-2016-6541 | High | 8.8 | 2018-07-06 | TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, v… |
CVE-2016-6540 | Medium | 6.5 | 2018-07-06 | Unauthenticated access to the cloud-based service maintained by TrackR Bravo is allowed for querying or sending GPS data for any Trackr device by using the tra… |
CVE-2016-6539 | Low | 3.5 | 2018-07-06 | The Trackr device ID is constructed of a manufacturer identifier of four zeroes followed by the BLE MAC address in reverse. The MAC address can be obtained by… |
CVE-2016-6538 | High | 8.8 | 2018-07-06 | The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 fo… |
CVE-2016-10725 | High | 7.5 | 2018-07-05 | In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts) because operation… |
CVE-2016-10724 | High | 7.5 | 2018-07-05 | Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2016) if an attacker… |
CVE-2016-10522 | High | 8.8 | 2018-07-05 | rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an a… |
CVE-2016-10723 | Medium | 5.5 | 2018-06-21 | An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local u… |
CVE-2016-9905 | High | 8.8 | 2018-06-11 | A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents. This vulnerability affects Firefox ESR < 45.6 and Thunderbir… |
CVE-2016-9904 | High | 7.5 | 2018-06-11 | An attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by another compartment/zone in specific contexts. This could be u… |
CVE-2016-9903 | Medium | 6.1 | 2018-06-11 | Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an additional vulnerability allowed this resource to be loaded a… |
CVE-2016-9902 | High | 7.5 | 2018-06-11 | The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content… |
CVE-2016-9901 | Critical | 9.8 | 2018-06-11 | HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" (unpr… |
CVE-2016-9900 | High | 7.5 | 2018-06-11 | External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cros… |
CVE-2016-9899 | Critical | 9.8 | 2018-06-11 | Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption. This vulnerability affects Firefox < 5… |
CVE-2016-9898 | Critical | 9.8 | 2018-06-11 | Use-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the Editor. This vulnerability affects Firefox < 50.1, Firefox ESR… |
CVE-2016-9897 | High | 7.5 | 2018-06-11 | Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES. This vuln… |
CVE-2016-9896 | High | 8.1 | 2018-06-11 | Use-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not currently enabled by default. This vulnerability affects Firefox < 50… |
CVE-2016-9895 | Medium | 6.1 | 2018-06-11 | Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. This vulnerability affects… |
CVE-2016-9894 | High | 7.5 | 2018-06-11 | A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later writers will overflow the buffer, resulting in a potentially exploit… |
CVE-2016-9893 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some… |
CVE-2016-9080 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… |
CVE-2016-9079 | High | 7.5 | 2018-06-11 | A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a… |
CVE-2016-9078 | High | 8.8 | 2018-06-11 | Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can result in same-orig… |
CVE-2016-9077 | High | 7.0 | 2018-06-11 | Canvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The rendering by the filter is variable depending on the input pixel, al… |
CVE-2016-9076 | Medium | 5.9 | 2018-06-11 | An issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be e… |
CVE-2016-9075 | Critical | 9.8 | 2018-06-11 | An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed in the permissions list. This allows a… |
CVE-2016-9074 | Medium | 5.9 | 2018-06-11 | An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1… |