# Vulnerabilities published in 2016


- [openSUSE-SU-2016:2485-1](https://insights.sbomify.com/openSUSE-SU-2016-2485-1/): Security update for MozillaThunderbird (not scored)
- [openSUSE-SU-2016:2484-1](https://insights.sbomify.com/openSUSE-SU-2016-2484-1/): Security update for MozillaThunderbird (not scored)
- [SUSE-SU-2016:2871-1](https://insights.sbomify.com/SUSE-SU-2016-2871-1/): Security update for libtcnative-1-0 (not scored)
- [SUSE-SU-2016:2627-1](https://insights.sbomify.com/SUSE-SU-2016-2627-1/): Security update for POS_Image3, POS_Server3 (not scored)
- [SUSE-SU-2016:2565-1](https://insights.sbomify.com/SUSE-SU-2016-2565-1/): Security update for dbus-1 (not scored)
- [SUSE-SU-2016:2249-1](https://insights.sbomify.com/SUSE-SU-2016-2249-1/): Security update for hawk (not scored)
- [SUSE-SU-2016:1946-1](https://insights.sbomify.com/SUSE-SU-2016-1946-1/): Security update for hawk2 (not scored)
- [SUSE-SU-2016:1941-1](https://insights.sbomify.com/SUSE-SU-2016-1941-1/): Security update for SUSE Linux Enterprise Server Docker images (not scored)
- [SUSE-SU-2016:1640-1](https://insights.sbomify.com/SUSE-SU-2016-1640-1/): Security update for ctdb (not scored)
- [SUSE-SU-2016:1465-1](https://insights.sbomify.com/SUSE-SU-2016-1465-1/): Recommended update for NetworkManager-kde4 (not scored)
- [SUSE-SU-2016:1366-1](https://insights.sbomify.com/SUSE-SU-2016-1366-1/): Recommended udpate for SUSE Manager Client Tools (not scored)
- [SUSE-SU-2016:0954-1](https://insights.sbomify.com/SUSE-SU-2016-0954-1/): Security update for quagga (not scored)
- [SUSE-SU-2016:0953-1](https://insights.sbomify.com/SUSE-SU-2016-0953-1/): Security update for quagga (not scored)
- [SUSE-SU-2016:0267-1](https://insights.sbomify.com/SUSE-SU-2016-0267-1/): Security update for rubygem-mail-2_4 (not scored)
- [SUSE-SU-2016:0242-1](https://insights.sbomify.com/SUSE-SU-2016-0242-1/): Security update for jakarta-commons-collections (not scored)
- [SUSE-SU-2016:0228-1](https://insights.sbomify.com/SUSE-SU-2016-0228-1/): Security update for apache-commons-collections (not scored)
- [RUSTSEC-2016-0007](https://insights.sbomify.com/RUSTSEC-2016-0007/): jwt appears to be unmaintained (not scored)
- [RUSTSEC-2016-0006](https://insights.sbomify.com/RUSTSEC-2016-0006/): `cassandra` crate is unmaintained; use `cassandra-cpp` instead (not scored)
- [RUSTSEC-2016-0005](https://insights.sbomify.com/RUSTSEC-2016-0005/): rust-crypto is unmaintained; switch to a modern alternative (not scored)
- [RUSTSEC-2016-0004](https://insights.sbomify.com/RUSTSEC-2016-0004/): libusb is unmaintained; use rusb instead (not scored)
- [PSF-2016-9](https://insights.sbomify.com/PSF-2016-9/): Issue #26657: HTTP server directory traversal (not scored)
- [PSF-2016-10](https://insights.sbomify.com/PSF-2016-10/): gettext.c2py() (not scored)
- [CVE-2016-9998](https://insights.sbomify.com/CVE-2016-9998/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9997](https://insights.sbomify.com/CVE-2016-9997/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9994](https://insights.sbomify.com/CVE-2016-9994/): SQL injection in Kenexa LCMS Premier on Cloud (high 7.1)
- [CVE-2016-9993](https://insights.sbomify.com/CVE-2016-9993/): SQL injection in Kenexa LCMS Premier on Cloud (high 7.1)
- [CVE-2016-9992](https://insights.sbomify.com/CVE-2016-9992/): SQL injection in Kenexa LCMS Premier on Cloud (high 7.1)
- [CVE-2016-9991](https://insights.sbomify.com/CVE-2016-9991/): Cross-site request forgery in Sterling Order Management (high 8.0)
- [CVE-2016-9990](https://insights.sbomify.com/CVE-2016-9990/): Cross-site scripting in iNotes (medium 6.1)
- [CVE-2016-9989](https://insights.sbomify.com/CVE-2016-9989/): Cross-site scripting in Jazz Reporting Service (medium 5.4)
- [CVE-2016-9988](https://insights.sbomify.com/CVE-2016-9988/): Cross-site scripting in Jazz Reporting Service (medium 5.4)
- [CVE-2016-9987](https://insights.sbomify.com/CVE-2016-9987/): Cross-site scripting in Jazz Reporting Service (medium 5.4)
- [CVE-2016-9986](https://insights.sbomify.com/CVE-2016-9986/): Cross-site scripting in Jazz Reporting Service (medium 5.4)
- [CVE-2016-9985](https://insights.sbomify.com/CVE-2016-9985/): Information disclosure in Cognos Business Intelligence (medium 5.5)
- [CVE-2016-9984](https://insights.sbomify.com/CVE-2016-9984/): Command injection in Maximo Asset Management (high 8.8)
- [CVE-2016-9983](https://insights.sbomify.com/CVE-2016-9983/): Information disclosure in Sterling B2B Integrator (medium 5.3)
- [CVE-2016-9982](https://insights.sbomify.com/CVE-2016-9982/): Information disclosure in Sterling B2B Integrator (medium 6.5)
- [CVE-2016-9981](https://insights.sbomify.com/CVE-2016-9981/): Other in Security AppScan Enterprise (high 8.1)
- [CVE-2016-9980](https://insights.sbomify.com/CVE-2016-9980/): Cross-site scripting in Curam Social Program Management (medium 5.4)
- [CVE-2016-9979](https://insights.sbomify.com/CVE-2016-9979/): Cross-site scripting in Curam Social Program Management (medium 5.4)
- [CVE-2016-9978](https://insights.sbomify.com/CVE-2016-9978/): Information disclosure in Curam Social Program Management (medium 4.3)
- [CVE-2016-9977](https://insights.sbomify.com/CVE-2016-9977/): Auth bypass in Maximo Asset Management (high 8.8)
- [CVE-2016-9976](https://insights.sbomify.com/CVE-2016-9976/): Path traversal in Maximo Asset Management (high 8.4)
- [CVE-2016-9975](https://insights.sbomify.com/CVE-2016-9975/): Cross-site request forgery in Jazz for Service Management (high 8.8)
- [CVE-2016-9973](https://insights.sbomify.com/CVE-2016-9973/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2016-9972](https://insights.sbomify.com/CVE-2016-9972/): Security feature bypass in Security QRadar SIEM (medium 5.9)
- [CVE-2016-9969](https://insights.sbomify.com/CVE-2016-9969/): Use after free in n/a (high 7.5)
- [CVE-2016-9967](https://insights.sbomify.com/CVE-2016-9967/): Denial of service in n/a (critical 9.8)
- [CVE-2016-9966](https://insights.sbomify.com/CVE-2016-9966/): Denial of service in n/a (critical 9.8)
- [CVE-2016-9965](https://insights.sbomify.com/CVE-2016-9965/): Denial of service in n/a (critical 9.8)
- [CVE-2016-9964](https://insights.sbomify.com/CVE-2016-9964/): bottle.py vulnerable to CRLF Injection (medium 6.5)
- [CVE-2016-9963](https://insights.sbomify.com/CVE-2016-9963/): Information disclosure in n/a (medium 5.9)
- [CVE-2016-9962](https://insights.sbomify.com/CVE-2016-9962/): Information Exposure in RunC (medium 6.4)
- [CVE-2016-9961](https://insights.sbomify.com/CVE-2016-9961/): Integer overflow in n/a (critical 9.8)
- [CVE-2016-9960](https://insights.sbomify.com/CVE-2016-9960/): game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash). (medium 5.5)
- [CVE-2016-9959](https://insights.sbomify.com/CVE-2016-9959/): Memory corruption in n/a (high 7.8)
- [CVE-2016-9958](https://insights.sbomify.com/CVE-2016-9958/): Memory corruption in n/a (high 7.8)
- [CVE-2016-9957](https://insights.sbomify.com/CVE-2016-9957/): Memory corruption in n/a (high 7.8)
- [CVE-2016-9956](https://insights.sbomify.com/CVE-2016-9956/): Path traversal in n/a (high 7.5)
- [CVE-2016-9955](https://insights.sbomify.com/CVE-2016-9955/): Incorrect signature verification in SimpleSAMLphp (medium 6.3)
- [CVE-2016-9954](https://insights.sbomify.com/CVE-2016-9954/): Denial of service in n/a (high 7.5)
- [CVE-2016-9953](https://insights.sbomify.com/CVE-2016-9953/): Information disclosure in n/a (critical 9.8)
- [CVE-2016-9952](https://insights.sbomify.com/CVE-2016-9952/): Security feature bypass in n/a (high 8.1)
- [CVE-2016-9951](https://insights.sbomify.com/CVE-2016-9951/): Command injection in n/a (medium 6.5)
- [CVE-2016-9950](https://insights.sbomify.com/CVE-2016-9950/): Path traversal in n/a (high 7.8)
- [CVE-2016-9949](https://insights.sbomify.com/CVE-2016-9949/): Code injection in n/a (high 7.8)
- [CVE-2016-9942](https://insights.sbomify.com/CVE-2016-9942/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9941](https://insights.sbomify.com/CVE-2016-9941/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9939](https://insights.sbomify.com/CVE-2016-9939/): Denial of service in n/a (high 7.5)
- [CVE-2016-9938](https://insights.sbomify.com/CVE-2016-9938/): Auth bypass in n/a (medium 5.3)
- [CVE-2016-9937](https://insights.sbomify.com/CVE-2016-9937/): Denial of service in n/a (high 7.5)
- [CVE-2016-9936](https://insights.sbomify.com/CVE-2016-9936/): Use after free in n/a (critical 9.8)
- [CVE-2016-9935](https://insights.sbomify.com/CVE-2016-9935/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9934](https://insights.sbomify.com/CVE-2016-9934/): Null dereference in n/a (high 7.5)
- [CVE-2016-9933](https://insights.sbomify.com/CVE-2016-9933/): Denial of service in n/a (high 7.5)
- [CVE-2016-9932](https://insights.sbomify.com/CVE-2016-9932/): Information disclosure in n/a (low 3.3)
- [CVE-2016-9928](https://insights.sbomify.com/CVE-2016-9928/): Privilege escalation in MCabber (high 7.4)
- [CVE-2016-9924](https://insights.sbomify.com/CVE-2016-9924/): XML external entity in n/a (critical 9.8)
- [CVE-2016-9923](https://insights.sbomify.com/CVE-2016-9923/): Use after free in n/a (medium 5.5)
- [CVE-2016-9922](https://insights.sbomify.com/CVE-2016-9922/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9921](https://insights.sbomify.com/CVE-2016-9921/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9920](https://insights.sbomify.com/CVE-2016-9920/): Command injection in n/a (high 7.5)
- [CVE-2016-9919](https://insights.sbomify.com/CVE-2016-9919/): Denial of service in n/a (high 7.5)
- [CVE-2016-9918](https://insights.sbomify.com/CVE-2016-9918/): Denial of service in n/a (high 7.5)
- [CVE-2016-9917](https://insights.sbomify.com/CVE-2016-9917/): Memory corruption in n/a (high 7.5)
- [CVE-2016-9916](https://insights.sbomify.com/CVE-2016-9916/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9915](https://insights.sbomify.com/CVE-2016-9915/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9914](https://insights.sbomify.com/CVE-2016-9914/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9913](https://insights.sbomify.com/CVE-2016-9913/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9912](https://insights.sbomify.com/CVE-2016-9912/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9911](https://insights.sbomify.com/CVE-2016-9911/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9910](https://insights.sbomify.com/CVE-2016-9910/): Cross-site Scripting in html5lib (medium 6.1)
- [CVE-2016-9909](https://insights.sbomify.com/CVE-2016-9909/): Improper Neutralization of Input During Web Page Generation in html5lib (medium 6.1)
- [CVE-2016-9908](https://insights.sbomify.com/CVE-2016-9908/): Information disclosure in n/a (low 3.3)
- [CVE-2016-9907](https://insights.sbomify.com/CVE-2016-9907/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9905](https://insights.sbomify.com/CVE-2016-9905/): Null dereference in Firefox ESR (high 8.8)
- [CVE-2016-9904](https://insights.sbomify.com/CVE-2016-9904/): Information disclosure in Firefox (high 7.5)
- [CVE-2016-9903](https://insights.sbomify.com/CVE-2016-9903/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2016-9902](https://insights.sbomify.com/CVE-2016-9902/): Missing authorization in Firefox (high 7.5)
- [CVE-2016-9901](https://insights.sbomify.com/CVE-2016-9901/): Cross-site scripting in Firefox (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/