# Vulnerabilities published in 2016


- [CVE-2016-7876](https://insights.sbomify.com/CVE-2016-7876/): Memory corruption in Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier (high 8.8)
- [CVE-2016-7875](https://insights.sbomify.com/CVE-2016-7875/): Integer overflow in Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier (high 8.8)
- [CVE-2016-7874](https://insights.sbomify.com/CVE-2016-7874/): Memory corruption in Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier (high 8.8)
- [CVE-2016-7873](https://insights.sbomify.com/CVE-2016-7873/): Memory corruption in Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier (high 8.8)
- [CVE-2016-7872](https://insights.sbomify.com/CVE-2016-7872/): Use after free in Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier (high 8.8)
- [CVE-2016-7871](https://insights.sbomify.com/CVE-2016-7871/): Memory corruption in Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier (high 8.8)
- [CVE-2016-7870](https://insights.sbomify.com/CVE-2016-7870/): Memory corruption in Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier (high 8.8)
- [CVE-2016-7869](https://insights.sbomify.com/CVE-2016-7869/): Memory corruption in Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier (high 8.8)
- [CVE-2016-7868](https://insights.sbomify.com/CVE-2016-7868/): Memory corruption in Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier (high 8.8)
- [CVE-2016-7867](https://insights.sbomify.com/CVE-2016-7867/): Memory corruption in Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier (high 8.8)
- [CVE-2016-7866](https://insights.sbomify.com/CVE-2016-7866/): Memory corruption in Adobe Animate 15.2.1.95 and earlier (critical 9.8)
- [CVE-2016-7865](https://insights.sbomify.com/CVE-2016-7865/): Memory corruption in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier (high 8.8)
- [CVE-2016-7864](https://insights.sbomify.com/CVE-2016-7864/): Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier (high 8.8)
- [CVE-2016-7863](https://insights.sbomify.com/CVE-2016-7863/): Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier (high 8.8)
- [CVE-2016-7862](https://insights.sbomify.com/CVE-2016-7862/): Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier (high 8.8)
- [CVE-2016-7861](https://insights.sbomify.com/CVE-2016-7861/): Memory corruption in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier (high 8.8)
- [CVE-2016-7860](https://insights.sbomify.com/CVE-2016-7860/): Memory corruption in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier (high 8.8)
- [CVE-2016-7859](https://insights.sbomify.com/CVE-2016-7859/): Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier (high 8.8)
- [CVE-2016-7858](https://insights.sbomify.com/CVE-2016-7858/): Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier (high 8.8)
- [CVE-2016-7857](https://insights.sbomify.com/CVE-2016-7857/): Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier (high 8.8)
- [CVE-2016-7856](https://insights.sbomify.com/CVE-2016-7856/): Memory corruption in Adobe DNG Converter 9.7 and earlier (critical 9.8)
- [CVE-2016-7855](https://insights.sbomify.com/CVE-2016-7855/): Adobe Flash Player Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2016-7854](https://insights.sbomify.com/CVE-2016-7854/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7853](https://insights.sbomify.com/CVE-2016-7853/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7852](https://insights.sbomify.com/CVE-2016-7852/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7851](https://insights.sbomify.com/CVE-2016-7851/): Cross-site scripting in Adobe Connect 9.5.6 and earlier versions (medium 6.1)
- [CVE-2016-7845](https://insights.sbomify.com/CVE-2016-7845/): File upload in GigaCC OFFICE (medium 6.5)
- [CVE-2016-7844](https://insights.sbomify.com/CVE-2016-7844/): Command injection in GigaCC OFFICE (medium 5.5)
- [CVE-2016-7843](https://insights.sbomify.com/CVE-2016-7843/): Path traversal in AttacheCase Lite (medium 5.5)
- [CVE-2016-7842](https://insights.sbomify.com/CVE-2016-7842/): Path traversal in AttacheCase (medium 5.5)
- [CVE-2016-7841](https://insights.sbomify.com/CVE-2016-7841/): Cross-site scripting in Olive Diary DX (medium 6.1)
- [CVE-2016-7840](https://insights.sbomify.com/CVE-2016-7840/): Cross-site scripting in WEB SCHEDULE (medium 6.1)
- [CVE-2016-7839](https://insights.sbomify.com/CVE-2016-7839/): Cross-site scripting in Olive Blog (medium 6.1)
- [CVE-2016-7838](https://insights.sbomify.com/CVE-2016-7838/): Path traversal in WinSparkle (high 7.8)
- [CVE-2016-7837](https://insights.sbomify.com/CVE-2016-7837/): Memory corruption in BlueZ (high 7.8)
- [CVE-2016-7836](https://insights.sbomify.com/CVE-2016-7836/): SKYSEA Client View Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2016-7835](https://insights.sbomify.com/CVE-2016-7835/): Use after free in H2O (critical 9.1)
- [CVE-2016-7834](https://insights.sbomify.com/CVE-2016-7834/): Information disclosure in n/a (high 8.8)
- [CVE-2016-7833](https://insights.sbomify.com/CVE-2016-7833/): Missing authorization in Cybozu Dezie (high 7.5)
- [CVE-2016-7832](https://insights.sbomify.com/CVE-2016-7832/): Information disclosure in Cybozu Dezie (medium 5.3)
- [CVE-2016-7831](https://insights.sbomify.com/CVE-2016-7831/): Open redirect in Sleipnir 4 Black Edition for Mac (medium 6.1)
- [CVE-2016-7830](https://insights.sbomify.com/CVE-2016-7830/): Auth bypass in PCS-XC1 (high 8.8)
- [CVE-2016-7826](https://insights.sbomify.com/CVE-2016-7826/): Path traversal in WNC01WH (medium 6.5)
- [CVE-2016-7825](https://insights.sbomify.com/CVE-2016-7825/): Path traversal in WNC01WH (medium 6.5)
- [CVE-2016-7824](https://insights.sbomify.com/CVE-2016-7824/): Security feature bypass in WNC01WH (high 8.8)
- [CVE-2016-7823](https://insights.sbomify.com/CVE-2016-7823/): Cross-site scripting in WNC01WH (medium 4.3)
- [CVE-2016-7822](https://insights.sbomify.com/CVE-2016-7822/): Cross-site request forgery in WNC01WH (high 8.8)
- [CVE-2016-7821](https://insights.sbomify.com/CVE-2016-7821/): Denial of service in WNC01WH (medium 6.5)
- [CVE-2016-7820](https://insights.sbomify.com/CVE-2016-7820/): Memory corruption in TS-WRLA (high 7.2)
- [CVE-2016-7819](https://insights.sbomify.com/CVE-2016-7819/): Command injection in TS-WRLA (high 7.2)
- [CVE-2016-7818](https://insights.sbomify.com/CVE-2016-7818/): Privilege escalation in Intstaller for Device data encryption program (high 7.8)
- [CVE-2016-7817](https://insights.sbomify.com/CVE-2016-7817/): Cross-site scripting in Simple keitai chat (medium 6.1)
- [CVE-2016-7816](https://insights.sbomify.com/CVE-2016-7816/): Weak cryptography in kintone mobile for Android (medium 5.9)
- [CVE-2016-7815](https://insights.sbomify.com/CVE-2016-7815/): Auth bypass in Remote Service Manager (medium 4.2)
- [CVE-2016-7814](https://insights.sbomify.com/CVE-2016-7814/): Information disclosure in TS-WRLA (high 7.5)
- [CVE-2016-7813](https://insights.sbomify.com/CVE-2016-7813/): Cross-site scripting in DERAEMON-CMS (medium 6.1)
- [CVE-2016-7812](https://insights.sbomify.com/CVE-2016-7812/): Weak cryptography in The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android (low 3.1)
- [CVE-2016-7811](https://insights.sbomify.com/CVE-2016-7811/): Auth bypass in CG-WLR300NX (high 8.8)
- [CVE-2016-7810](https://insights.sbomify.com/CVE-2016-7810/): Cross-site scripting in CG-WLR300NX (medium 4.8)
- [CVE-2016-7809](https://insights.sbomify.com/CVE-2016-7809/): Cross-site request forgery in CG-WLR300NX (high 8.8)
- [CVE-2016-7808](https://insights.sbomify.com/CVE-2016-7808/): Cross-site scripting in CG-WLBARGMH (medium 6.1)
- [CVE-2016-7807](https://insights.sbomify.com/CVE-2016-7807/): Auth bypass in WFS-SR01 (high 7.5)
- [CVE-2016-7806](https://insights.sbomify.com/CVE-2016-7806/): Command injection in WFS-SR01 (critical 9.8)
- [CVE-2016-7805](https://insights.sbomify.com/CVE-2016-7805/): Weak cryptography in mobiGate App for Android (medium 5.9)
- [CVE-2016-7804](https://insights.sbomify.com/CVE-2016-7804/): Privilege escalation in 7 Zip for Windows (high 7.8)
- [CVE-2016-7803](https://insights.sbomify.com/CVE-2016-7803/): SQL injection in Cybozu Garoon (high 8.8)
- [CVE-2016-7802](https://insights.sbomify.com/CVE-2016-7802/): Path traversal in n/a (medium 6.5)
- [CVE-2016-7801](https://insights.sbomify.com/CVE-2016-7801/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2016-7800](https://insights.sbomify.com/CVE-2016-7800/): Integer overflow in n/a (high 7.5)
- [CVE-2016-7799](https://insights.sbomify.com/CVE-2016-7799/): Denial of service in n/a (medium 6.5)
- [CVE-2016-7798](https://insights.sbomify.com/CVE-2016-7798/): OpenSSL gem for Ruby using inadequate encryption strength (high 7.5)
- [CVE-2016-7797](https://insights.sbomify.com/CVE-2016-7797/): Denial of service in n/a (high 7.5)
- [CVE-2016-7796](https://insights.sbomify.com/CVE-2016-7796/): Denial of service in n/a (medium 5.5)
- [CVE-2016-7795](https://insights.sbomify.com/CVE-2016-7795/): Denial of service in n/a (medium 5.5)
- [CVE-2016-7794](https://insights.sbomify.com/CVE-2016-7794/): sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name. (critical 9.8)
- [CVE-2016-7793](https://insights.sbomify.com/CVE-2016-7793/): sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL. (high 8.8)
- [CVE-2016-7792](https://insights.sbomify.com/CVE-2016-7792/): Missing authorization in n/a (high 8.8)
- [CVE-2016-7791](https://insights.sbomify.com/CVE-2016-7791/): File upload in n/a (critical 9.8)
- [CVE-2016-7790](https://insights.sbomify.com/CVE-2016-7790/): File upload in n/a (critical 9.8)
- [CVE-2016-7789](https://insights.sbomify.com/CVE-2016-7789/): SQL injection in n/a (critical 9.8)
- [CVE-2016-7788](https://insights.sbomify.com/CVE-2016-7788/): SQL injection in n/a (critical 9.8)
- [CVE-2016-7787](https://insights.sbomify.com/CVE-2016-7787/): Command injection in n/a (medium 4.9)
- [CVE-2016-7786](https://insights.sbomify.com/CVE-2016-7786/): Missing authorization in n/a (high 8.8)
- [CVE-2016-7785](https://insights.sbomify.com/CVE-2016-7785/): Denial of service in n/a (medium 5.5)
- [CVE-2016-7784](https://insights.sbomify.com/CVE-2016-7784/): SQL injection in n/a (critical 9.8)
- [CVE-2016-7783](https://insights.sbomify.com/CVE-2016-7783/): SQL injection in n/a (critical 9.8)
- [CVE-2016-7782](https://insights.sbomify.com/CVE-2016-7782/): SQL injection in n/a (critical 9.8)
- [CVE-2016-7781](https://insights.sbomify.com/CVE-2016-7781/): SQL injection in n/a (critical 9.8)
- [CVE-2016-7780](https://insights.sbomify.com/CVE-2016-7780/): SQL injection in n/a (critical 9.8)
- [CVE-2016-7777](https://insights.sbomify.com/CVE-2016-7777/): Race condition in n/a (medium 6.3)
- [CVE-2016-7765](https://insights.sbomify.com/CVE-2016-7765/): Information disclosure in n/a (low 2.4)
- [CVE-2016-7762](https://insights.sbomify.com/CVE-2016-7762/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-7761](https://insights.sbomify.com/CVE-2016-7761/): Information disclosure in n/a (medium 5.5)
- [CVE-2016-7759](https://insights.sbomify.com/CVE-2016-7759/): Information disclosure in n/a (medium 4.3)
- [CVE-2016-7742](https://insights.sbomify.com/CVE-2016-7742/): Memory corruption in n/a (high 7.8)
- [CVE-2016-7714](https://insights.sbomify.com/CVE-2016-7714/): Information disclosure in n/a (low 3.3)
- [CVE-2016-7667](https://insights.sbomify.com/CVE-2016-7667/): Denial of service in n/a (high 7.5)
- [CVE-2016-7666](https://insights.sbomify.com/CVE-2016-7666/): Information disclosure in n/a (medium 5.5)
- [CVE-2016-7665](https://insights.sbomify.com/CVE-2016-7665/): Denial of service in n/a (medium 5.5)
- [CVE-2016-7664](https://insights.sbomify.com/CVE-2016-7664/): Information disclosure in n/a (low 2.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/16/