# Vulnerabilities published in 2016


- [CVE-2016-8768](https://insights.sbomify.com/CVE-2016-8768/): Privilege escalation in Honor 6,Honor 6 Plus,Honor 7 Versions earlier than 6.9.16 (high 7.8)
- [CVE-2016-8764](https://insights.sbomify.com/CVE-2016-8764/): Memory corruption in P9,P9 Lite,P8 Lite Versions earlier than EVA-AL10C00B352,VNS-L21C185B130 and earlier versions,ALE-L02C636B150 and earlier versions (medium 6.4)
- [CVE-2016-8763](https://insights.sbomify.com/CVE-2016-8763/): Use after free in P9,P9 Lite,P8 Lite Versions earlier than EVA-AL10C00B352,VNS-L21C185B130 and earlier versions,ALE-L02C636B150 and earlier versions (high 7.8)
- [CVE-2016-8762](https://insights.sbomify.com/CVE-2016-8762/): Denial of service in P9,P9 Lite,P8 Lite Versions earlier than EVA-AL10C00B352,VNS-L21C185B130 and earlier versions,ALE-L02C636B150 and earlier versions (medium 5.0)
- [CVE-2016-8761](https://insights.sbomify.com/CVE-2016-8761/): Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before H60-L02 6.10.1 (high 7.8)
- [CVE-2016-8760](https://insights.sbomify.com/CVE-2016-8760/): Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before H60-L02 6.10.1 (high 7.8)
- [CVE-2016-8759](https://insights.sbomify.com/CVE-2016-8759/): Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before H60-L02 6.10.1 (high 7.8)
- [CVE-2016-8758](https://insights.sbomify.com/CVE-2016-8758/): Denial of service in Mate8 NXT-AL10C00B561 and earlier versions,NXT-CL10C00B561 and earlier versions,NXT-DL10C00B561 and earlier versions,NXT-TL10C00B561 and earlier versions (medium 5.5)
- [CVE-2016-8757](https://insights.sbomify.com/CVE-2016-8757/): Information disclosure in P9 EVA-AL10C00B192 and earlier versions,EVA-DL10C00B192 and earlier versions,EVA-TL10C00B192 and earlier versions,EVA-CL10C00B192 and earlier versions (low 3.3)
- [CVE-2016-8756](https://insights.sbomify.com/CVE-2016-8756/): Denial of service in Mate8 NXT-AL10C00B197 and earlier versions,NXT-DL10C00B197 and earlier versions,NXT-TL10C00B197 and earlier versions,NXT-CL10C00B197 and earlier versions (medium 5.5)
- [CVE-2016-8754](https://insights.sbomify.com/CVE-2016-8754/): Hardcoded credentials in OceanStor 5600 V3 V300R003C00 (high 7.5)
- [CVE-2016-8752](https://insights.sbomify.com/CVE-2016-8752/): Path Traversal in Apache Atlas (high 7.5)
- [CVE-2016-8751](https://insights.sbomify.com/CVE-2016-8751/): Apache Ranger admin users can store some arbitrary javascript code to be executed when normal users login and access policies (medium 4.8)
- [CVE-2016-8750](https://insights.sbomify.com/CVE-2016-8750/): Moderate severity vulnerability that affects org.apache.karaf:apache-karaf (medium 6.5)
- [CVE-2016-8749](https://insights.sbomify.com/CVE-2016-8749/): Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks (critical 9.8)
- [CVE-2016-8748](https://insights.sbomify.com/CVE-2016-8748/): Cross-site Scripting in Apache NiFi (medium 5.4)
- [CVE-2016-8747](https://insights.sbomify.com/CVE-2016-8747/): Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request (high 7.5)
- [CVE-2016-8746](https://insights.sbomify.com/CVE-2016-8746/): Apache Ranger policy engine incorrectly matches paths in certain conditions (medium 5.9)
- [CVE-2016-8745](https://insights.sbomify.com/CVE-2016-8745/): Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat (high 7.5)
- [CVE-2016-8744](https://insights.sbomify.com/CVE-2016-8744/): Deserialization of Untrusted Data in Apache Brooklyn (high 8.8)
- [CVE-2016-8743](https://insights.sbomify.com/CVE-2016-8743/): Other in Apache HTTP Server (high 7.5)
- [CVE-2016-8742](https://insights.sbomify.com/CVE-2016-8742/): Privilege escalation in Apache CouchDB (high 7.8)
- [CVE-2016-8741](https://insights.sbomify.com/CVE-2016-8741/): Exposure of Sensitive Information to an Unauthorized Actor in Apache Qpid Broker for Java (high 7.5)
- [CVE-2016-8740](https://insights.sbomify.com/CVE-2016-8740/): Denial of service in Apache HTTP Server (high 7.5)
- [CVE-2016-8739](https://insights.sbomify.com/CVE-2016-8739/): Improper Restriction of XML External Entity Reference in Apache CXF JAX-RS (high 7.5)
- [CVE-2016-8738](https://insights.sbomify.com/CVE-2016-8738/): Apache Struts vulnerable to possible DoS attack when using URLValidator (medium 5.9)
- [CVE-2016-8737](https://insights.sbomify.com/CVE-2016-8737/): Apache Brooklyn is vulnerable to cross-site request forgery (CSRF) (high 8.8)
- [CVE-2016-8736](https://insights.sbomify.com/CVE-2016-8736/): Apache OpenMeetings RCE (critical 9.8)
- [CVE-2016-8735](https://insights.sbomify.com/CVE-2016-8735/): Apache Tomcat Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2016-8734](https://insights.sbomify.com/CVE-2016-8734/): Denial of service in Apache Subversion (medium 6.5)
- [CVE-2016-8733](https://insights.sbomify.com/CVE-2016-8733/): Integer overflow in SmartOS (high 7.8)
- [CVE-2016-8732](https://insights.sbomify.com/CVE-2016-8732/): Security feature bypass in Dell Protected Workspace (high 7.8)
- [CVE-2016-8731](https://insights.sbomify.com/CVE-2016-8731/): Hardcoded credentials in Foscam C1 Webcam (critical 9.8)
- [CVE-2016-8730](https://insights.sbomify.com/CVE-2016-8730/): Memory corruption in Corel PHOTO-PAINT (high 8.8)
- [CVE-2016-8729](https://insights.sbomify.com/CVE-2016-8729/): Memory corruption in MuPDF (high 7.5)
- [CVE-2016-8728](https://insights.sbomify.com/CVE-2016-8728/): Memory corruption in MuPDF (high 8.6)
- [CVE-2016-8727](https://insights.sbomify.com/CVE-2016-8727/): Information disclosure in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client (high 7.5)
- [CVE-2016-8726](https://insights.sbomify.com/CVE-2016-8726/): Null dereference in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client (high 7.5)
- [CVE-2016-8725](https://insights.sbomify.com/CVE-2016-8725/): Information disclosure in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client (medium 5.3)
- [CVE-2016-8724](https://insights.sbomify.com/CVE-2016-8724/): Information disclosure in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client (medium 5.3)
- [CVE-2016-8723](https://insights.sbomify.com/CVE-2016-8723/): Null dereference in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client (high 7.5)
- [CVE-2016-8722](https://insights.sbomify.com/CVE-2016-8722/): Information disclosure in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client (medium 5.3)
- [CVE-2016-8721](https://insights.sbomify.com/CVE-2016-8721/): Command injection in Moxa AWK-3131A WAP (critical 9.1)
- [CVE-2016-8720](https://insights.sbomify.com/CVE-2016-8720/): Other in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client (low 3.1)
- [CVE-2016-8719](https://insights.sbomify.com/CVE-2016-8719/): Cross-site scripting in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client (high 7.5)
- [CVE-2016-8718](https://insights.sbomify.com/CVE-2016-8718/): Cross-site request forgery in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client (high 7.5)
- [CVE-2016-8717](https://insights.sbomify.com/CVE-2016-8717/): Hardcoded credentials in Moxa (critical 10.0)
- [CVE-2016-8716](https://insights.sbomify.com/CVE-2016-8716/): Information disclosure in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client (high 7.5)
- [CVE-2016-8715](https://insights.sbomify.com/CVE-2016-8715/): Memory corruption in Argus (high 8.8)
- [CVE-2016-8714](https://insights.sbomify.com/CVE-2016-8714/): Memory corruption in R (high 7.5)
- [CVE-2016-8713](https://insights.sbomify.com/CVE-2016-8713/): Memory corruption in Nitro Pro (high 8.8)
- [CVE-2016-8712](https://insights.sbomify.com/CVE-2016-8712/): Weak cryptography in AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client (medium 5.9)
- [CVE-2016-8711](https://insights.sbomify.com/CVE-2016-8711/): Memory corruption in Nitro Pro (high 8.8)
- [CVE-2016-8710](https://insights.sbomify.com/CVE-2016-8710/): Memory corruption in Libbpg (high 7.5)
- [CVE-2016-8709](https://insights.sbomify.com/CVE-2016-8709/): Memory corruption in Nitro Pro (high 8.8)
- [CVE-2016-8707](https://insights.sbomify.com/CVE-2016-8707/): Memory corruption in ImageMagick 7.0.3-1 (high 7.5)
- [CVE-2016-8706](https://insights.sbomify.com/CVE-2016-8706/): Integer overflow in Memcached (high 8.1)
- [CVE-2016-8705](https://insights.sbomify.com/CVE-2016-8705/): Integer overflow in Memcached (critical 9.8)
- [CVE-2016-8704](https://insights.sbomify.com/CVE-2016-8704/): Integer overflow in Memcached (critical 9.8)
- [CVE-2016-8703](https://insights.sbomify.com/CVE-2016-8703/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8702](https://insights.sbomify.com/CVE-2016-8702/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8701](https://insights.sbomify.com/CVE-2016-8701/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8700](https://insights.sbomify.com/CVE-2016-8700/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8699](https://insights.sbomify.com/CVE-2016-8699/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8698](https://insights.sbomify.com/CVE-2016-8698/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8697](https://insights.sbomify.com/CVE-2016-8697/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8696](https://insights.sbomify.com/CVE-2016-8696/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8695](https://insights.sbomify.com/CVE-2016-8695/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8694](https://insights.sbomify.com/CVE-2016-8694/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8693](https://insights.sbomify.com/CVE-2016-8693/): Use after free in n/a (high 7.8)
- [CVE-2016-8692](https://insights.sbomify.com/CVE-2016-8692/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8691](https://insights.sbomify.com/CVE-2016-8691/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8690](https://insights.sbomify.com/CVE-2016-8690/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8689](https://insights.sbomify.com/CVE-2016-8689/): Denial of service in n/a (high 7.5)
- [CVE-2016-8688](https://insights.sbomify.com/CVE-2016-8688/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8687](https://insights.sbomify.com/CVE-2016-8687/): Memory corruption in n/a (high 7.5)
- [CVE-2016-8686](https://insights.sbomify.com/CVE-2016-8686/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8685](https://insights.sbomify.com/CVE-2016-8685/): Memory corruption in n/a (medium 5.5)
- [CVE-2016-8684](https://insights.sbomify.com/CVE-2016-8684/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8683](https://insights.sbomify.com/CVE-2016-8683/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8682](https://insights.sbomify.com/CVE-2016-8682/): Denial of service in n/a (high 7.5)
- [CVE-2016-8681](https://insights.sbomify.com/CVE-2016-8681/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8680](https://insights.sbomify.com/CVE-2016-8680/): Denial of service in n/a (medium 6.5)
- [CVE-2016-8679](https://insights.sbomify.com/CVE-2016-8679/): Denial of service in n/a (medium 6.5)
- [CVE-2016-8678](https://insights.sbomify.com/CVE-2016-8678/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8677](https://insights.sbomify.com/CVE-2016-8677/): Denial of service in n/a (high 8.8)
- [CVE-2016-8676](https://insights.sbomify.com/CVE-2016-8676/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8675](https://insights.sbomify.com/CVE-2016-8675/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8674](https://insights.sbomify.com/CVE-2016-8674/): Use after free in n/a (medium 5.5)
- [CVE-2016-8673](https://insights.sbomify.com/CVE-2016-8673/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2016-8672](https://insights.sbomify.com/CVE-2016-8672/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-8671](https://insights.sbomify.com/CVE-2016-8671/): Information disclosure in n/a (medium 5.9)
- [CVE-2016-8670](https://insights.sbomify.com/CVE-2016-8670/): Integer overflow in n/a (critical 9.8)
- [CVE-2016-8669](https://insights.sbomify.com/CVE-2016-8669/): Denial of service in n/a (medium 6.0)
- [CVE-2016-8668](https://insights.sbomify.com/CVE-2016-8668/): Denial of service in n/a (medium 6.0)
- [CVE-2016-8667](https://insights.sbomify.com/CVE-2016-8667/): Denial of service in n/a (medium 6.0)
- [CVE-2016-8666](https://insights.sbomify.com/CVE-2016-8666/): Denial of service in n/a (high 7.5)
- [CVE-2016-8661](https://insights.sbomify.com/CVE-2016-8661/): Memory corruption in Little Snitch version 3.0 through 3.6.1 (high 8.4)
- [CVE-2016-8660](https://insights.sbomify.com/CVE-2016-8660/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8659](https://insights.sbomify.com/CVE-2016-8659/): Privilege escalation in n/a (high 7.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/10/