Vulnerabilities published in 2016
9,398 vulnerabilities were published in 2016: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 1 of 94.
- openSUSE-SU-2016:2485-1 Security update for MozillaThunderbird
- openSUSE-SU-2016:2484-1 Security update for MozillaThunderbird
- SUSE-SU-2016:2871-1 Security update for libtcnative-1-0
- SUSE-SU-2016:2627-1 Security update for POS_Image3, POS_Server3
- SUSE-SU-2016:2565-1 Security update for dbus-1
- SUSE-SU-2016:2249-1 Security update for hawk
- SUSE-SU-2016:1946-1 Security update for hawk2
- SUSE-SU-2016:1941-1 Security update for SUSE Linux Enterprise Server Docker images
- SUSE-SU-2016:1640-1 Security update for ctdb
- SUSE-SU-2016:1465-1 Recommended update for NetworkManager-kde4
- SUSE-SU-2016:1366-1 Recommended udpate for SUSE Manager Client Tools
- SUSE-SU-2016:0954-1 Security update for quagga
- SUSE-SU-2016:0953-1 Security update for quagga
- SUSE-SU-2016:0267-1 Security update for rubygem-mail-2_4
- SUSE-SU-2016:0242-1 Security update for jakarta-commons-collections
- SUSE-SU-2016:0228-1 Security update for apache-commons-collections
- RUSTSEC-2016-0007 jwt appears to be unmaintained
- RUSTSEC-2016-0006 `cassandra` crate is unmaintained; use `cassandra-cpp` instead
- RUSTSEC-2016-0005 rust-crypto is unmaintained; switch to a modern alternative
- RUSTSEC-2016-0004 libusb is unmaintained; use rusb instead
- PSF-2016-9 Issue #26657: HTTP server directory traversal
- PSF-2016-10 gettext.c2py()
- CVE-2016-9998 Cross-site scripting in n/a
- CVE-2016-9997 Cross-site scripting in n/a
- CVE-2016-9994 SQL injection in Kenexa LCMS Premier on Cloud
- CVE-2016-9993 SQL injection in Kenexa LCMS Premier on Cloud
- CVE-2016-9992 SQL injection in Kenexa LCMS Premier on Cloud
- CVE-2016-9991 Cross-site request forgery in Sterling Order Management
- CVE-2016-9990 Cross-site scripting in iNotes
- CVE-2016-9989 Cross-site scripting in Jazz Reporting Service
- CVE-2016-9988 Cross-site scripting in Jazz Reporting Service
- CVE-2016-9987 Cross-site scripting in Jazz Reporting Service
- CVE-2016-9986 Cross-site scripting in Jazz Reporting Service
- CVE-2016-9985 Information disclosure in Cognos Business Intelligence
- CVE-2016-9984 Command injection in Maximo Asset Management
- CVE-2016-9983 Information disclosure in Sterling B2B Integrator
- CVE-2016-9982 Information disclosure in Sterling B2B Integrator
- CVE-2016-9981 Other in Security AppScan Enterprise
- CVE-2016-9980 Cross-site scripting in Curam Social Program Management
- CVE-2016-9979 Cross-site scripting in Curam Social Program Management
- CVE-2016-9978 Information disclosure in Curam Social Program Management
- CVE-2016-9977 Auth bypass in Maximo Asset Management
- CVE-2016-9976 Path traversal in Maximo Asset Management
- CVE-2016-9975 Cross-site request forgery in Jazz for Service Management
- CVE-2016-9973 Cross-site scripting in Rational Collaborative Lifecycle Management
- CVE-2016-9972 Security feature bypass in Security QRadar SIEM
- CVE-2016-9969 Use after free in n/a
- CVE-2016-9967 Denial of service in n/a
- CVE-2016-9966 Denial of service in n/a
- CVE-2016-9965 Denial of service in n/a
- CVE-2016-9964 bottle.py vulnerable to CRLF Injection
- CVE-2016-9963 Information disclosure in n/a
- CVE-2016-9962 Information Exposure in RunC
- CVE-2016-9961 Integer overflow in n/a
- CVE-2016-9960 game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
- CVE-2016-9959 Memory corruption in n/a
- CVE-2016-9958 Memory corruption in n/a
- CVE-2016-9957 Memory corruption in n/a
- CVE-2016-9956 Path traversal in n/a
- CVE-2016-9955 Incorrect signature verification in SimpleSAMLphp
- CVE-2016-9954 Denial of service in n/a
- CVE-2016-9953 Information disclosure in n/a
- CVE-2016-9952 Security feature bypass in n/a
- CVE-2016-9951 Command injection in n/a
- CVE-2016-9950 Path traversal in n/a
- CVE-2016-9949 Code injection in n/a
- CVE-2016-9942 Memory corruption in n/a
- CVE-2016-9941 Memory corruption in n/a
- CVE-2016-9939 Denial of service in n/a
- CVE-2016-9938 Auth bypass in n/a
- CVE-2016-9937 Denial of service in n/a
- CVE-2016-9936 Use after free in n/a
- CVE-2016-9935 Memory corruption in n/a
- CVE-2016-9934 Null dereference in n/a
- CVE-2016-9933 Denial of service in n/a
- CVE-2016-9932 Information disclosure in n/a
- CVE-2016-9928 Privilege escalation in MCabber
- CVE-2016-9924 XML external entity in n/a
- CVE-2016-9923 Use after free in n/a
- CVE-2016-9922 Denial of service in n/a
- CVE-2016-9921 Denial of service in n/a
- CVE-2016-9920 Command injection in n/a
- CVE-2016-9919 Denial of service in n/a
- CVE-2016-9918 Denial of service in n/a
- CVE-2016-9917 Memory corruption in n/a
- CVE-2016-9916 Denial of service in n/a
- CVE-2016-9915 Denial of service in n/a
- CVE-2016-9914 Denial of service in n/a
- CVE-2016-9913 Denial of service in n/a
- CVE-2016-9912 Denial of service in n/a
- CVE-2016-9911 Denial of service in n/a
- CVE-2016-9910 Cross-site Scripting in html5lib
- CVE-2016-9909 Improper Neutralization of Input During Web Page Generation in html5lib
- CVE-2016-9908 Information disclosure in n/a
- CVE-2016-9907 Denial of service in n/a
- CVE-2016-9905 Null dereference in Firefox ESR
- CVE-2016-9904 Information disclosure in Firefox
- CVE-2016-9903 Cross-site scripting in Firefox
- CVE-2016-9902 Missing authorization in Firefox
- CVE-2016-9901 Cross-site scripting in Firefox