# Vulnerabilities published in 2016


- [CVE-2016-8658](https://insights.sbomify.com/CVE-2016-8658/): Memory corruption in n/a (medium 6.1)
- [CVE-2016-8657](https://insights.sbomify.com/CVE-2016-8657/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-8656](https://insights.sbomify.com/CVE-2016-8656/): Privilege escalation in jbossas (high 7.0)
- [CVE-2016-8655](https://insights.sbomify.com/CVE-2016-8655/): Race condition in n/a (high 7.8)
- [CVE-2016-8654](https://insights.sbomify.com/CVE-2016-8654/): Memory corruption in jasper (high 7.8)
- [CVE-2016-8653](https://insights.sbomify.com/CVE-2016-8653/): Deserialization in Fuse (medium 5.3)
- [CVE-2016-8652](https://insights.sbomify.com/CVE-2016-8652/): Denial of service in n/a (medium 5.9)
- [CVE-2016-8651](https://insights.sbomify.com/CVE-2016-8651/): Missing authorization in OpenShift Enterprise (low 3.1)
- [CVE-2016-8650](https://insights.sbomify.com/CVE-2016-8650/): Memory corruption in n/a (medium 5.5)
- [CVE-2016-8649](https://insights.sbomify.com/CVE-2016-8649/): Path traversal in LXC before 1.0.9 and 2.x before 2.0.6 (critical 9.1)
- [CVE-2016-8648](https://insights.sbomify.com/CVE-2016-8648/): Deserialization in Karaf (high 7.2)
- [CVE-2016-8647](https://insights.sbomify.com/CVE-2016-8647/): Improper Input Validation in ansible (low 2.2)
- [CVE-2016-8646](https://insights.sbomify.com/CVE-2016-8646/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8645](https://insights.sbomify.com/CVE-2016-8645/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8644](https://insights.sbomify.com/CVE-2016-8644/): Missing authorization in Moodle 2.x and 3.x (medium 5.3)
- [CVE-2016-8643](https://insights.sbomify.com/CVE-2016-8643/): Missing authorization in Moodle 2.x and 3.x (medium 4.3)
- [CVE-2016-8642](https://insights.sbomify.com/CVE-2016-8642/): Moodle Unauthenticated Access (medium 5.3)
- [CVE-2016-8641](https://insights.sbomify.com/CVE-2016-8641/): Privilege escalation in nagios (medium 6.7)
- [CVE-2016-8640](https://insights.sbomify.com/CVE-2016-8640/): SQL Injection in pycsw (critical 9.1)
- [CVE-2016-8639](https://insights.sbomify.com/CVE-2016-8639/): Cross-site scripting in foreman (medium 6.1)
- [CVE-2016-8638](https://insights.sbomify.com/CVE-2016-8638/): Session Fixation in ipsilon (critical 9.1)
- [CVE-2016-8637](https://insights.sbomify.com/CVE-2016-8637/): Information disclosure in dracut (medium 5.0)
- [CVE-2016-8636](https://insights.sbomify.com/CVE-2016-8636/): Integer overflow in n/a (high 7.8)
- [CVE-2016-8635](https://insights.sbomify.com/CVE-2016-8635/): Weak cryptography in nss (medium 5.3)
- [CVE-2016-8634](https://insights.sbomify.com/CVE-2016-8634/): Cross-site scripting in foreman (medium 6.1)
- [CVE-2016-8633](https://insights.sbomify.com/CVE-2016-8633/): Memory corruption in n/a (medium 6.8)
- [CVE-2016-8632](https://insights.sbomify.com/CVE-2016-8632/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8631](https://insights.sbomify.com/CVE-2016-8631/): Business logic in Openshift Enterprise (medium 6.3)
- [CVE-2016-8630](https://insights.sbomify.com/CVE-2016-8630/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8629](https://insights.sbomify.com/CVE-2016-8629/): Moderate severity vulnerability that affects org.keycloak:keycloak-core (medium 6.5)
- [CVE-2016-8628](https://insights.sbomify.com/CVE-2016-8628/): Ansible fails to properly sanitize fact variables sent from the Ansible controller (high 7.6)
- [CVE-2016-8627](https://insights.sbomify.com/CVE-2016-8627/): Denial of service in admin-cli (medium 4.3)
- [CVE-2016-8626](https://insights.sbomify.com/CVE-2016-8626/): Denial of service in Ceph (medium 6.5)
- [CVE-2016-8625](https://insights.sbomify.com/CVE-2016-8625/): Other in curl (medium 5.3)
- [CVE-2016-8624](https://insights.sbomify.com/CVE-2016-8624/): Server-side request forgery in curl (medium 5.3)
- [CVE-2016-8623](https://insights.sbomify.com/CVE-2016-8623/): Use after free in curl (low 3.3)
- [CVE-2016-8622](https://insights.sbomify.com/CVE-2016-8622/): Integer overflow in curl (low 3.7)
- [CVE-2016-8621](https://insights.sbomify.com/CVE-2016-8621/): Memory corruption in curl (medium 5.3)
- [CVE-2016-8620](https://insights.sbomify.com/CVE-2016-8620/): Integer overflow in curl (medium 6.5)
- [CVE-2016-8619](https://insights.sbomify.com/CVE-2016-8619/): Use after free in curl (medium 5.3)
- [CVE-2016-8618](https://insights.sbomify.com/CVE-2016-8618/): Use after free in curl (medium 5.3)
- [CVE-2016-8617](https://insights.sbomify.com/CVE-2016-8617/): Memory corruption in curl (low 3.3)
- [CVE-2016-8616](https://insights.sbomify.com/CVE-2016-8616/): Auth bypass in curl (low 3.7)
- [CVE-2016-8615](https://insights.sbomify.com/CVE-2016-8615/): Other in curl (medium 5.3)
- [CVE-2016-8614](https://insights.sbomify.com/CVE-2016-8614/): Ansible apt_key module does not properly verify key fingerprint (medium 6.3)
- [CVE-2016-8613](https://insights.sbomify.com/CVE-2016-8613/): Cross-site scripting in foreman (medium 6.4)
- [CVE-2016-8612](https://insights.sbomify.com/CVE-2016-8612/): Denial of service in mod cluster (medium 4.3)
- [CVE-2016-8611](https://insights.sbomify.com/CVE-2016-8611/): Denial of service in openstack-glance (medium 4.3)
- [CVE-2016-8610](https://insights.sbomify.com/CVE-2016-8610/): Denial of service in OpenSSL (high 7.5)
- [CVE-2016-8609](https://insights.sbomify.com/CVE-2016-8609/): Improper Authentication in org.keycloak:keycloak-core (low 3.7)
- [CVE-2016-8608](https://insights.sbomify.com/CVE-2016-8608/): Cross-site scripting in BRMS (medium 5.4)
- [CVE-2016-8606](https://insights.sbomify.com/CVE-2016-8606/): Code injection in n/a (critical 9.8)
- [CVE-2016-8605](https://insights.sbomify.com/CVE-2016-8605/): Race condition in n/a (medium 5.3)
- [CVE-2016-8602](https://insights.sbomify.com/CVE-2016-8602/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8600](https://insights.sbomify.com/CVE-2016-8600/): Security feature bypass in n/a (high 7.5)
- [CVE-2016-8598](https://insights.sbomify.com/CVE-2016-8598/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-8597](https://insights.sbomify.com/CVE-2016-8597/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-8596](https://insights.sbomify.com/CVE-2016-8596/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-8595](https://insights.sbomify.com/CVE-2016-8595/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8593](https://insights.sbomify.com/CVE-2016-8593/): Path traversal in n/a (high 8.8)
- [CVE-2016-8592](https://insights.sbomify.com/CVE-2016-8592/): Command injection in n/a (high 8.8)
- [CVE-2016-8591](https://insights.sbomify.com/CVE-2016-8591/): Command injection in n/a (high 8.8)
- [CVE-2016-8590](https://insights.sbomify.com/CVE-2016-8590/): Command injection in n/a (high 8.8)
- [CVE-2016-8589](https://insights.sbomify.com/CVE-2016-8589/): Command injection in n/a (high 8.8)
- [CVE-2016-8588](https://insights.sbomify.com/CVE-2016-8588/): Command injection in n/a (high 7.3)
- [CVE-2016-8587](https://insights.sbomify.com/CVE-2016-8587/): Path traversal in n/a (high 7.3)
- [CVE-2016-8586](https://insights.sbomify.com/CVE-2016-8586/): Command injection in n/a (high 8.8)
- [CVE-2016-8585](https://insights.sbomify.com/CVE-2016-8585/): Command injection in n/a (high 8.8)
- [CVE-2016-8584](https://insights.sbomify.com/CVE-2016-8584/): Auth bypass in n/a (critical 9.8)
- [CVE-2016-8583](https://insights.sbomify.com/CVE-2016-8583/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-8582](https://insights.sbomify.com/CVE-2016-8582/): SQL injection in n/a (critical 9.8)
- [CVE-2016-8581](https://insights.sbomify.com/CVE-2016-8581/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-8580](https://insights.sbomify.com/CVE-2016-8580/): Deserialization in n/a (critical 9.8)
- [CVE-2016-8579](https://insights.sbomify.com/CVE-2016-8579/): Denial of Service in docker2aci (medium 4.0)
- [CVE-2016-8578](https://insights.sbomify.com/CVE-2016-8578/): Null dereference in n/a (medium 6.0)
- [CVE-2016-8577](https://insights.sbomify.com/CVE-2016-8577/): Denial of service in n/a (medium 6.0)
- [CVE-2016-8576](https://insights.sbomify.com/CVE-2016-8576/): Denial of service in n/a (medium 6.0)
- [CVE-2016-8575](https://insights.sbomify.com/CVE-2016-8575/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-8574](https://insights.sbomify.com/CVE-2016-8574/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-8569](https://insights.sbomify.com/CVE-2016-8569/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8568](https://insights.sbomify.com/CVE-2016-8568/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8567](https://insights.sbomify.com/CVE-2016-8567/): Hardcoded credentials in Siemens SICAM PAS before 8.00 (critical 9.8)
- [CVE-2016-8566](https://insights.sbomify.com/CVE-2016-8566/): Hardcoded credentials in Siemens SICAM PAS before 8.00 (high 7.8)
- [CVE-2016-8565](https://insights.sbomify.com/CVE-2016-8565/): Missing authorization in n/a (critical 9.1)
- [CVE-2016-8564](https://insights.sbomify.com/CVE-2016-8564/): SQL injection in n/a (medium 6.5)
- [CVE-2016-8563](https://insights.sbomify.com/CVE-2016-8563/): Denial of service in n/a (high 7.5)
- [CVE-2016-8562](https://insights.sbomify.com/CVE-2016-8562/): Siemens SIMATIC CP 1543-1 Improper Privilege Management (high 7.5, exploited in the wild)
- [CVE-2016-8561](https://insights.sbomify.com/CVE-2016-8561/): Privilege escalation in n/a (medium 6.6)
- [CVE-2016-8535](https://insights.sbomify.com/CVE-2016-8535/): Other in Matrix Operating Environment (low 3.5)
- [CVE-2016-8534](https://insights.sbomify.com/CVE-2016-8534/): Privilege escalation in Matrix Operating Environment (high 8.8)
- [CVE-2016-8533](https://insights.sbomify.com/CVE-2016-8533/): Privilege escalation in Matrix Operating Environment (high 8.8)
- [CVE-2016-8532](https://insights.sbomify.com/CVE-2016-8532/): Cross-site scripting in Matrix Operating Environment (medium 5.4)
- [CVE-2016-8531](https://insights.sbomify.com/CVE-2016-8531/): Information disclosure in Matrix Operating Environment (medium 5.3)
- [CVE-2016-8530](https://insights.sbomify.com/CVE-2016-8530/): A remote denial of service vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. (high 7.5)
- [CVE-2016-8529](https://insights.sbomify.com/CVE-2016-8529/): Command injection in StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS (high 7.6)
- [CVE-2016-8528](https://insights.sbomify.com/CVE-2016-8528/): Privilege escalation in Helion Eucalyptus (high 8.8)
- [CVE-2016-8527](https://insights.sbomify.com/CVE-2016-8527/): Cross-site scripting in Aruba AirWave (medium 6.1)
- [CVE-2016-8526](https://insights.sbomify.com/CVE-2016-8526/): XML external entity in Aruba AirWave (high 8.8)
- [CVE-2016-8525](https://insights.sbomify.com/CVE-2016-8525/): Information disclosure in iMC PLAT (high 7.5)
- [CVE-2016-8523](https://insights.sbomify.com/CVE-2016-8523/): Command injection in Smart Storage Administrator (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/11/