# Vulnerabilities published in 2016


- [CVE-2016-8413](https://insights.sbomify.com/CVE-2016-8413/): Information disclosure in Android (medium 4.7)
- [CVE-2016-8412](https://insights.sbomify.com/CVE-2016-8412/): Privilege escalation in Android (high 7.0)
- [CVE-2016-8411](https://insights.sbomify.com/CVE-2016-8411/): Memory corruption in Android (critical 9.8)
- [CVE-2016-8410](https://insights.sbomify.com/CVE-2016-8410/): Information disclosure in Android (medium 4.7)
- [CVE-2016-8409](https://insights.sbomify.com/CVE-2016-8409/): Information disclosure in Android (medium 4.7)
- [CVE-2016-8408](https://insights.sbomify.com/CVE-2016-8408/): Information disclosure in Android (medium 4.7)
- [CVE-2016-8407](https://insights.sbomify.com/CVE-2016-8407/): Information disclosure in Android (medium 4.7)
- [CVE-2016-8406](https://insights.sbomify.com/CVE-2016-8406/): Information disclosure in Android (medium 4.7)
- [CVE-2016-8405](https://insights.sbomify.com/CVE-2016-8405/): Information disclosure in Android (medium 4.7)
- [CVE-2016-8404](https://insights.sbomify.com/CVE-2016-8404/): Information disclosure in Android Kernel-3.10 (medium 4.7)
- [CVE-2016-8403](https://insights.sbomify.com/CVE-2016-8403/): Information disclosure in Android (medium 4.7)
- [CVE-2016-8402](https://insights.sbomify.com/CVE-2016-8402/): Information disclosure in Android (medium 4.7)
- [CVE-2016-8401](https://insights.sbomify.com/CVE-2016-8401/): Information disclosure in Android (medium 4.7)
- [CVE-2016-8400](https://insights.sbomify.com/CVE-2016-8400/): Information disclosure in Android (medium 5.5)
- [CVE-2016-8399](https://insights.sbomify.com/CVE-2016-8399/): Privilege escalation in Android (high 7.0)
- [CVE-2016-8398](https://insights.sbomify.com/CVE-2016-8398/): Missing authorization in Android (critical 9.8)
- [CVE-2016-8397](https://insights.sbomify.com/CVE-2016-8397/): Information disclosure in Android (medium 5.5)
- [CVE-2016-8396](https://insights.sbomify.com/CVE-2016-8396/): Information disclosure in Android (medium 5.5)
- [CVE-2016-8395](https://insights.sbomify.com/CVE-2016-8395/): Denial of service in Android (medium 4.7)
- [CVE-2016-8394](https://insights.sbomify.com/CVE-2016-8394/): Privilege escalation in Android (high 7.0)
- [CVE-2016-8393](https://insights.sbomify.com/CVE-2016-8393/): Privilege escalation in Android (high 7.0)
- [CVE-2016-8392](https://insights.sbomify.com/CVE-2016-8392/): Privilege escalation in Android (high 7.0)
- [CVE-2016-8391](https://insights.sbomify.com/CVE-2016-8391/): Privilege escalation in Android (high 7.0)
- [CVE-2016-8390](https://insights.sbomify.com/CVE-2016-8390/): Memory corruption in Hopper (high 7.5)
- [CVE-2016-8389](https://insights.sbomify.com/CVE-2016-8389/): Integer overflow in Argus (high 8.8)
- [CVE-2016-8388](https://insights.sbomify.com/CVE-2016-8388/): Memory corruption in Argus (high 8.8)
- [CVE-2016-8387](https://insights.sbomify.com/CVE-2016-8387/): Memory corruption in Argus (high 8.8)
- [CVE-2016-8386](https://insights.sbomify.com/CVE-2016-8386/): Memory corruption in Argus (high 8.8)
- [CVE-2016-8385](https://insights.sbomify.com/CVE-2016-8385/): Memory corruption in Argus (high 8.8)
- [CVE-2016-8384](https://insights.sbomify.com/CVE-2016-8384/): Memory corruption in AntennaHouse (high 8.3)
- [CVE-2016-8383](https://insights.sbomify.com/CVE-2016-8383/): Memory corruption in AntennaHouse (high 8.3)
- [CVE-2016-8382](https://insights.sbomify.com/CVE-2016-8382/): Memory corruption in AntennaHouse (high 8.3)
- [CVE-2016-8380](https://insights.sbomify.com/CVE-2016-8380/): Missing authorization in Phoenix Contact ILC PLCs (high 7.3)
- [CVE-2016-8379](https://insights.sbomify.com/CVE-2016-8379/): Weak cryptography in Moxa ioLogik E1200 Series before 3.12 (high 8.1)
- [CVE-2016-8378](https://insights.sbomify.com/CVE-2016-8378/): Hardcoded credentials in Lynxspring JENEsys BAS Bridge 1.1.8 and older (critical 9.8)
- [CVE-2016-8377](https://insights.sbomify.com/CVE-2016-8377/): Memory corruption in Fatek Automation PLC WinProladder 3.11 Build 14701 (high 8.0)
- [CVE-2016-8376](https://insights.sbomify.com/CVE-2016-8376/): Open redirect in Kabona AB WDC Vulnerabilities prior to Version 3.4.0 (medium 6.1)
- [CVE-2016-8375](https://insights.sbomify.com/CVE-2016-8375/): Information disclosure in BD Alaris 8015 through 9.7 and 8000 (medium 4.9)
- [CVE-2016-8374](https://insights.sbomify.com/CVE-2016-8374/): Denial of service in Schneider Electric Magelis HMI (high 7.5)
- [CVE-2016-8372](https://insights.sbomify.com/CVE-2016-8372/): Weak cryptography in Moxa ioLogik E1200 Series before 3.12 (high 8.1)
- [CVE-2016-8371](https://insights.sbomify.com/CVE-2016-8371/): Auth bypass in Phoenix Contact ILC PLCs (high 7.3)
- [CVE-2016-8370](https://insights.sbomify.com/CVE-2016-8370/): Weak cryptography in Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module (high 7.5)
- [CVE-2016-8369](https://insights.sbomify.com/CVE-2016-8369/): Cross-site request forgery in Lynxspring JENEsys BAS Bridge 1.1.8 and older (high 8.8)
- [CVE-2016-8368](https://insights.sbomify.com/CVE-2016-8368/): Denial of service in Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module (high 8.6)
- [CVE-2016-8367](https://insights.sbomify.com/CVE-2016-8367/): Denial of service in Schneider Electric Magelis HMI (medium 5.3)
- [CVE-2016-8366](https://insights.sbomify.com/CVE-2016-8366/): Hardcoded credentials in Phoenix Contact ILC PLCs (high 7.3)
- [CVE-2016-8365](https://insights.sbomify.com/CVE-2016-8365/): Denial of service in PI System software (medium 5.5)
- [CVE-2016-8364](https://insights.sbomify.com/CVE-2016-8364/): Memory corruption in IBHsoftec S7-SoftPLC CPX43 prior to 4.12b (critical 9.8)
- [CVE-2016-8363](https://insights.sbomify.com/CVE-2016-8363/): Command injection in Moxa OnCell (critical 10.0)
- [CVE-2016-8362](https://insights.sbomify.com/CVE-2016-8362/): Missing authorization in Moxa OnCell (medium 6.5)
- [CVE-2016-8361](https://insights.sbomify.com/CVE-2016-8361/): Hardcoded credentials in Lynxspring JENEsys BAS Bridge 1.1.8 and older (high 8.6)
- [CVE-2016-8360](https://insights.sbomify.com/CVE-2016-8360/): Use after free in Moxa SoftCMS prior to Version 1.6 (high 8.1)
- [CVE-2016-8359](https://insights.sbomify.com/CVE-2016-8359/): Cross-site scripting in Moxa ioLogik E1200 Series before 3.12 (medium 6.1)
- [CVE-2016-8358](https://insights.sbomify.com/CVE-2016-8358/): Security feature bypass in Smiths-Medical CADD-Solis Medication Safety Software through 3.1 (high 8.5)
- [CVE-2016-8357](https://insights.sbomify.com/CVE-2016-8357/): Missing authorization in Lynxspring JENEsys BAS Bridge 1.1.8 and older (high 7.1)
- [CVE-2016-8356](https://insights.sbomify.com/CVE-2016-8356/): Cross-site scripting in Kabona AB WDC prior to Version 3.4.0 (high 8.2)
- [CVE-2016-8355](https://insights.sbomify.com/CVE-2016-8355/): Privilege escalation in Smiths-Medical CADD-Solis Medication Safety Software through 3.1 (critical 9.9)
- [CVE-2016-8354](https://insights.sbomify.com/CVE-2016-8354/): Code injection in Schneider Electric Unity PRO Control prior to V11.1 (high 7.0)
- [CVE-2016-8353](https://insights.sbomify.com/CVE-2016-8353/): Missing authorization in OSIsoft PI Web API 2015 R2 1.5.1 (medium 6.4)
- [CVE-2016-8352](https://insights.sbomify.com/CVE-2016-8352/): Memory corruption in Schneider Electric ConneXium TCSEFEC2* (critical 10.0)
- [CVE-2016-8350](https://insights.sbomify.com/CVE-2016-8350/): Cross-site request forgery in Moxa ioLogik E1200 Series before 3.12 (medium 6.3)
- [CVE-2016-8348](https://insights.sbomify.com/CVE-2016-8348/): XML external entity in Emerson Liebert SiteScan 6.5, and prior (critical 9.8)
- [CVE-2016-8347](https://insights.sbomify.com/CVE-2016-8347/): Auth bypass in Kabona AB WDC prior to Version 3.4.0 (critical 9.8)
- [CVE-2016-8346](https://insights.sbomify.com/CVE-2016-8346/): Information disclosure in Moxa EDR-810 Industrial Secure Router (high 7.5)
- [CVE-2016-8344](https://insights.sbomify.com/CVE-2016-8344/): Denial of service in Honeywell Experion PKS through 431 (low 3.7)
- [CVE-2016-8343](https://insights.sbomify.com/CVE-2016-8343/): Path traversal in n/a (high 7.5)
- [CVE-2016-8341](https://insights.sbomify.com/CVE-2016-8341/): SQL injection in Ecava IntegraXor 5.0.413.0 (critical 9.8)
- [CVE-2016-8339](https://insights.sbomify.com/CVE-2016-8339/): Memory corruption in Redis (medium 6.6)
- [CVE-2016-8335](https://insights.sbomify.com/CVE-2016-8335/): Memory corruption in Iceni Argus 6.6.04 (Sep 7 2012) NK - Linux x64 and 6.6.04 (Nov 14 2014) NK - Windows x64. (high 8.8)
- [CVE-2016-8334](https://insights.sbomify.com/CVE-2016-8334/): Information disclosure in Foxit Reader (medium 6.8)
- [CVE-2016-8333](https://insights.sbomify.com/CVE-2016-8333/): Memory corruption in Iceni Argus 6.6.04 (high 8.8)
- [CVE-2016-8332](https://insights.sbomify.com/CVE-2016-8332/): Memory corruption in OPENJPEG (high 7.5)
- [CVE-2016-8331](https://insights.sbomify.com/CVE-2016-8331/): Memory corruption in LibTIFF 4.0.6 (high 8.1)
- [CVE-2016-8330](https://insights.sbomify.com/CVE-2016-8330/): Missing authorization in Solaris Operating System (low 3.7)
- [CVE-2016-8329](https://insights.sbomify.com/CVE-2016-8329/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2016-8328](https://insights.sbomify.com/CVE-2016-8328/): Missing authorization in Java SE (low 3.7)
- [CVE-2016-8327](https://insights.sbomify.com/CVE-2016-8327/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2016-8325](https://insights.sbomify.com/CVE-2016-8325/): Missing authorization in One-to-One Fulfillment (critical 9.1)
- [CVE-2016-8324](https://insights.sbomify.com/CVE-2016-8324/): Missing authorization in FLEXCUBE Core Banking (medium 5.3)
- [CVE-2016-8323](https://insights.sbomify.com/CVE-2016-8323/): Missing authorization in FLEXCUBE Core Banking (medium 5.4)
- [CVE-2016-8322](https://insights.sbomify.com/CVE-2016-8322/): Information disclosure in FLEXCUBE Core Banking (medium 4.3)
- [CVE-2016-8320](https://insights.sbomify.com/CVE-2016-8320/): Missing authorization in FLEXCUBE Enterprise Limits and Collateral Management (medium 6.1)
- [CVE-2016-8319](https://insights.sbomify.com/CVE-2016-8319/): Missing authorization in FLEXCUBE Investor Servicing (medium 6.1)
- [CVE-2016-8318](https://insights.sbomify.com/CVE-2016-8318/): Denial of service in MySQL Server (medium 6.8)
- [CVE-2016-8317](https://insights.sbomify.com/CVE-2016-8317/): Missing authorization in FLEXCUBE Investor Servicing (medium 5.3)
- [CVE-2016-8316](https://insights.sbomify.com/CVE-2016-8316/): Missing authorization in FLEXCUBE Investor Servicing (medium 5.4)
- [CVE-2016-8315](https://insights.sbomify.com/CVE-2016-8315/): Missing authorization in FLEXCUBE Investor Servicing (high 8.1)
- [CVE-2016-8314](https://insights.sbomify.com/CVE-2016-8314/): Information disclosure in FLEXCUBE Core Banking (low 3.1)
- [CVE-2016-8313](https://insights.sbomify.com/CVE-2016-8313/): Information disclosure in FLEXCUBE Private Banking (medium 4.1)
- [CVE-2016-8312](https://insights.sbomify.com/CVE-2016-8312/): Missing authorization in FLEXCUBE Private Banking (high 8.2)
- [CVE-2016-8311](https://insights.sbomify.com/CVE-2016-8311/): Missing authorization in FLEXCUBE Universal Banking (medium 6.5)
- [CVE-2016-8310](https://insights.sbomify.com/CVE-2016-8310/): Other in FLEXCUBE Universal Banking (high 7.3)
- [CVE-2016-8309](https://insights.sbomify.com/CVE-2016-8309/): Missing authorization in FLEXCUBE Investor Servicing (medium 4.3)
- [CVE-2016-8308](https://insights.sbomify.com/CVE-2016-8308/): Missing authorization in FLEXCUBE Private Banking (medium 4.3)
- [CVE-2016-8307](https://insights.sbomify.com/CVE-2016-8307/): Missing authorization in FLEXCUBE Universal Banking (medium 5.3)
- [CVE-2016-8306](https://insights.sbomify.com/CVE-2016-8306/): Missing authorization in FLEXCUBE Investor Servicing (medium 5.4)
- [CVE-2016-8305](https://insights.sbomify.com/CVE-2016-8305/): Information disclosure in FLEXCUBE Universal Banking (low 2.1)
- [CVE-2016-8304](https://insights.sbomify.com/CVE-2016-8304/): Missing authorization in FLEXCUBE Universal Banking (medium 5.4)
- [CVE-2016-8303](https://insights.sbomify.com/CVE-2016-8303/): Other in FLEXCUBE Universal Banking (medium 6.1)
- [CVE-2016-8302](https://insights.sbomify.com/CVE-2016-8302/): Information disclosure in FLEXCUBE Universal Banking (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/13/