# Vulnerabilities published in 2016


- [CVE-2016-9900](https://insights.sbomify.com/CVE-2016-9900/): Security feature bypass in Firefox (high 7.5)
- [CVE-2016-9899](https://insights.sbomify.com/CVE-2016-9899/): Use after free in Firefox (critical 9.8)
- [CVE-2016-9898](https://insights.sbomify.com/CVE-2016-9898/): Use after free in Firefox (critical 9.8)
- [CVE-2016-9897](https://insights.sbomify.com/CVE-2016-9897/): Memory corruption in Firefox (high 7.5)
- [CVE-2016-9896](https://insights.sbomify.com/CVE-2016-9896/): Use after free in Firefox (high 8.1)
- [CVE-2016-9895](https://insights.sbomify.com/CVE-2016-9895/): Security feature bypass in Firefox (medium 6.1)
- [CVE-2016-9894](https://insights.sbomify.com/CVE-2016-9894/): Memory corruption in Firefox (high 7.5)
- [CVE-2016-9893](https://insights.sbomify.com/CVE-2016-9893/): Memory corruption in Firefox (critical 9.8)
- [CVE-2016-9892](https://insights.sbomify.com/CVE-2016-9892/): Weak cryptography in n/a (medium 5.9)
- [CVE-2016-9891](https://insights.sbomify.com/CVE-2016-9891/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-9889](https://insights.sbomify.com/CVE-2016-9889/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9888](https://insights.sbomify.com/CVE-2016-9888/): Null dereference in n/a (medium 5.5)
- [CVE-2016-9885](https://insights.sbomify.com/CVE-2016-9885/): Missing authorization in GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1 (critical 9.8)
- [CVE-2016-9882](https://insights.sbomify.com/CVE-2016-9882/): Information disclosure in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0 (high 7.5)
- [CVE-2016-9880](https://insights.sbomify.com/CVE-2016-9880/): Missing authorization in GemFire broker for Cloud Foundry (critical 9.8)
- [CVE-2016-9879](https://insights.sbomify.com/CVE-2016-9879/): Security Constraint Bypass in Spring Security (high 7.5)
- [CVE-2016-9878](https://insights.sbomify.com/CVE-2016-9878/): Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized (high 7.5)
- [CVE-2016-9877](https://insights.sbomify.com/CVE-2016-9877/): Auth bypass in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6; RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12 and 1.7.x before 1.7.7 (critical 9.8)
- [CVE-2016-9873](https://insights.sbomify.com/CVE-2016-9873/): SQL injection in EMC Documentum D2 EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 (medium 6.3)
- [CVE-2016-9872](https://insights.sbomify.com/CVE-2016-9872/): Cross-site scripting in EMC Documentum D2 EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 (medium 6.1)
- [CVE-2016-9871](https://insights.sbomify.com/CVE-2016-9871/): Privilege escalation in EMC Isilon OneFS EMC Isilon OneFS 7.2.1.0 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x (high 7.2)
- [CVE-2016-9870](https://insights.sbomify.com/CVE-2016-9870/): Other in EMC Isilon OneFS (medium 6.7)
- [CVE-2016-9869](https://insights.sbomify.com/CVE-2016-9869/): Missing authorization in EMC ScaleIO versions before 2.0.1.1 (medium 5.5)
- [CVE-2016-9868](https://insights.sbomify.com/CVE-2016-9868/): Denial of service in EMC ScaleIO versions before 2.0.1.1 (medium 5.5)
- [CVE-2016-9867](https://insights.sbomify.com/CVE-2016-9867/): Privilege escalation in EMC ScaleIO versions before 2.0.1.1 (high 8.8)
- [CVE-2016-9866](https://insights.sbomify.com/CVE-2016-9866/): phpMyAdmin CSRF Vulnerability (critical 9.8)
- [CVE-2016-9865](https://insights.sbomify.com/CVE-2016-9865/): Deserialization in n/a (critical 9.8)
- [CVE-2016-9864](https://insights.sbomify.com/CVE-2016-9864/): SQL injection in n/a (high 7.5)
- [CVE-2016-9863](https://insights.sbomify.com/CVE-2016-9863/): phpMyAdmin DoS Vulnerability (high 7.5)
- [CVE-2016-9862](https://insights.sbomify.com/CVE-2016-9862/): Cross-site scripting in n/a (high 7.5)
- [CVE-2016-9861](https://insights.sbomify.com/CVE-2016-9861/): phpMyAdmin Bypass white-list protection for URL redirection (high 7.5)
- [CVE-2016-9860](https://insights.sbomify.com/CVE-2016-9860/): phpMyAdmin Denial of Service (DoS) (medium 5.9)
- [CVE-2016-9859](https://insights.sbomify.com/CVE-2016-9859/): Denial of service in n/a (medium 5.3)
- [CVE-2016-9858](https://insights.sbomify.com/CVE-2016-9858/): Denial of service in n/a (medium 5.3)
- [CVE-2016-9857](https://insights.sbomify.com/CVE-2016-9857/): phpMyAdmin XSS Vulnerability (medium 6.1)
- [CVE-2016-9856](https://insights.sbomify.com/CVE-2016-9856/): phpMyAdmin XSS Vulnerability (medium 6.1)
- [CVE-2016-9855](https://insights.sbomify.com/CVE-2016-9855/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-9854](https://insights.sbomify.com/CVE-2016-9854/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-9853](https://insights.sbomify.com/CVE-2016-9853/): phpMyAdmin path disclosure (medium 5.3)
- [CVE-2016-9852](https://insights.sbomify.com/CVE-2016-9852/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-9851](https://insights.sbomify.com/CVE-2016-9851/): phpMyAdmin Bypass logout timeout (medium 5.3)
- [CVE-2016-9850](https://insights.sbomify.com/CVE-2016-9850/): Auth bypass in n/a (medium 5.3)
- [CVE-2016-9849](https://insights.sbomify.com/CVE-2016-9849/): Auth bypass in n/a (critical 9.8)
- [CVE-2016-9848](https://insights.sbomify.com/CVE-2016-9848/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-9847](https://insights.sbomify.com/CVE-2016-9847/): phpMyAdmin Cryptographic Vulnerability (medium 5.3)
- [CVE-2016-9846](https://insights.sbomify.com/CVE-2016-9846/): Information disclosure in n/a (medium 6.5)
- [CVE-2016-9845](https://insights.sbomify.com/CVE-2016-9845/): Information disclosure in n/a (medium 6.5)
- [CVE-2016-9844](https://insights.sbomify.com/CVE-2016-9844/): Memory corruption in n/a (medium 4.0)
- [CVE-2016-9843](https://insights.sbomify.com/CVE-2016-9843/): Other in n/a (critical 9.8)
- [CVE-2016-9842](https://insights.sbomify.com/CVE-2016-9842/): Integer overflow in n/a (high 8.8)
- [CVE-2016-9841](https://insights.sbomify.com/CVE-2016-9841/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9840](https://insights.sbomify.com/CVE-2016-9840/): Memory corruption in n/a (high 8.8)
- [CVE-2016-9839](https://insights.sbomify.com/CVE-2016-9839/): Information disclosure in n/a (high 7.5)
- [CVE-2016-9838](https://insights.sbomify.com/CVE-2016-9838/): Privilege escalation in n/a (high 7.5)
- [CVE-2016-9837](https://insights.sbomify.com/CVE-2016-9837/): Missing authorization in n/a (high 7.5)
- [CVE-2016-9836](https://insights.sbomify.com/CVE-2016-9836/): File upload in n/a (critical 9.8)
- [CVE-2016-9835](https://insights.sbomify.com/CVE-2016-9835/): Deserialization in n/a (critical 9.8)
- [CVE-2016-9834](https://insights.sbomify.com/CVE-2016-9834/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9832](https://insights.sbomify.com/CVE-2016-9832/): Code injection in n/a (critical 9.9)
- [CVE-2016-9831](https://insights.sbomify.com/CVE-2016-9831/): Memory corruption in n/a (high 7.8)
- [CVE-2016-9830](https://insights.sbomify.com/CVE-2016-9830/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9829](https://insights.sbomify.com/CVE-2016-9829/): Memory corruption in n/a (high 7.8)
- [CVE-2016-9828](https://insights.sbomify.com/CVE-2016-9828/): Null dereference in n/a (medium 5.5)
- [CVE-2016-9827](https://insights.sbomify.com/CVE-2016-9827/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9826](https://insights.sbomify.com/CVE-2016-9826/): Integer overflow in n/a (medium 5.5)
- [CVE-2016-9825](https://insights.sbomify.com/CVE-2016-9825/): Integer overflow in n/a (medium 5.5)
- [CVE-2016-9824](https://insights.sbomify.com/CVE-2016-9824/): Integer overflow in n/a (medium 5.5)
- [CVE-2016-9823](https://insights.sbomify.com/CVE-2016-9823/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9822](https://insights.sbomify.com/CVE-2016-9822/): Integer overflow in n/a (medium 5.5)
- [CVE-2016-9821](https://insights.sbomify.com/CVE-2016-9821/): Integer overflow in n/a (medium 5.5)
- [CVE-2016-9820](https://insights.sbomify.com/CVE-2016-9820/): Integer overflow in n/a (medium 5.5)
- [CVE-2016-9819](https://insights.sbomify.com/CVE-2016-9819/): Integer overflow in n/a (medium 5.5)
- [CVE-2016-9818](https://insights.sbomify.com/CVE-2016-9818/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9817](https://insights.sbomify.com/CVE-2016-9817/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9816](https://insights.sbomify.com/CVE-2016-9816/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9815](https://insights.sbomify.com/CVE-2016-9815/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9814](https://insights.sbomify.com/CVE-2016-9814/): SimpleSAMLphp SAML2 spoof SAML responses (critical 9.1)
- [CVE-2016-9813](https://insights.sbomify.com/CVE-2016-9813/): Null dereference in n/a (medium 5.5)
- [CVE-2016-9812](https://insights.sbomify.com/CVE-2016-9812/): Denial of service in n/a (high 7.5)
- [CVE-2016-9811](https://insights.sbomify.com/CVE-2016-9811/): Denial of service in n/a (medium 4.7)
- [CVE-2016-9810](https://insights.sbomify.com/CVE-2016-9810/): Memory corruption in n/a (medium 5.5)
- [CVE-2016-9809](https://insights.sbomify.com/CVE-2016-9809/): Memory corruption in n/a (high 7.8)
- [CVE-2016-9808](https://insights.sbomify.com/CVE-2016-9808/): Memory corruption in n/a (high 7.5)
- [CVE-2016-9807](https://insights.sbomify.com/CVE-2016-9807/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9806](https://insights.sbomify.com/CVE-2016-9806/): Race condition in n/a (high 7.8)
- [CVE-2016-9804](https://insights.sbomify.com/CVE-2016-9804/): Memory corruption in n/a (medium 5.3)
- [CVE-2016-9803](https://insights.sbomify.com/CVE-2016-9803/): Integer overflow in n/a (medium 5.3)
- [CVE-2016-9802](https://insights.sbomify.com/CVE-2016-9802/): Memory corruption in n/a (medium 5.3)
- [CVE-2016-9801](https://insights.sbomify.com/CVE-2016-9801/): Memory corruption in n/a (medium 5.3)
- [CVE-2016-9800](https://insights.sbomify.com/CVE-2016-9800/): Memory corruption in n/a (medium 5.3)
- [CVE-2016-9799](https://insights.sbomify.com/CVE-2016-9799/): Memory corruption in n/a (medium 5.3)
- [CVE-2016-9798](https://insights.sbomify.com/CVE-2016-9798/): Use after free in n/a (medium 5.3)
- [CVE-2016-9797](https://insights.sbomify.com/CVE-2016-9797/): Denial of service in n/a (medium 5.3)
- [CVE-2016-9796](https://insights.sbomify.com/CVE-2016-9796/): Auth bypass in n/a (critical 9.8)
- [CVE-2016-9795](https://insights.sbomify.com/CVE-2016-9795/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-9794](https://insights.sbomify.com/CVE-2016-9794/): Use after free in n/a (high 7.8)
- [CVE-2016-9793](https://insights.sbomify.com/CVE-2016-9793/): Memory corruption in n/a (high 7.8)
- [CVE-2016-9778](https://insights.sbomify.com/CVE-2016-9778/): An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c (high 7.5)
- [CVE-2016-9777](https://insights.sbomify.com/CVE-2016-9777/): Memory corruption in n/a (high 7.8)
- [CVE-2016-9776](https://insights.sbomify.com/CVE-2016-9776/): Denial of service in n/a (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/2/