# Vulnerabilities published in 2016


- [CVE-2016-7119](https://insights.sbomify.com/CVE-2016-7119/): Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) (medium 5.4)
- [CVE-2016-7118](https://insights.sbomify.com/CVE-2016-7118/): Null dereference in n/a (medium 5.5)
- [CVE-2016-7117](https://insights.sbomify.com/CVE-2016-7117/): Use after free in n/a (critical 9.8)
- [CVE-2016-7116](https://insights.sbomify.com/CVE-2016-7116/): Path traversal in n/a (medium 6.0)
- [CVE-2016-7115](https://insights.sbomify.com/CVE-2016-7115/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7114](https://insights.sbomify.com/CVE-2016-7114/): Auth bypass in n/a (high 8.8)
- [CVE-2016-7113](https://insights.sbomify.com/CVE-2016-7113/): Denial of service in n/a (high 7.5)
- [CVE-2016-7112](https://insights.sbomify.com/CVE-2016-7112/): Auth bypass in n/a (critical 9.8)
- [CVE-2016-7111](https://insights.sbomify.com/CVE-2016-7111/): MantisBT XSS through weak CSP when using Gravatar plugin (medium 4.7)
- [CVE-2016-7110](https://insights.sbomify.com/CVE-2016-7110/): Command injection in n/a (critical 9.8)
- [CVE-2016-7109](https://insights.sbomify.com/CVE-2016-7109/): Command injection in n/a (critical 9.8)
- [CVE-2016-7108](https://insights.sbomify.com/CVE-2016-7108/): Information disclosure in n/a (medium 6.5)
- [CVE-2016-7107](https://insights.sbomify.com/CVE-2016-7107/): Auth bypass in n/a (high 7.5)
- [CVE-2016-7103](https://insights.sbomify.com/CVE-2016-7103/): jQuery-UI vulnerable to Cross-site Scripting in dialog closeText (medium 6.1)
- [CVE-2016-7102](https://insights.sbomify.com/CVE-2016-7102/): Code injection in n/a (high 8.4)
- [CVE-2016-7101](https://insights.sbomify.com/CVE-2016-7101/): Denial of service in n/a (medium 6.5)
- [CVE-2016-7099](https://insights.sbomify.com/CVE-2016-7099/): Security feature bypass in n/a (medium 5.9)
- [CVE-2016-7098](https://insights.sbomify.com/CVE-2016-7098/): Race condition in n/a (high 8.1)
- [CVE-2016-7097](https://insights.sbomify.com/CVE-2016-7097/): Privilege escalation in n/a (medium 4.4)
- [CVE-2016-7095](https://insights.sbomify.com/CVE-2016-7095/): File upload in n/a (critical 9.8)
- [CVE-2016-7094](https://insights.sbomify.com/CVE-2016-7094/): Memory corruption in n/a (medium 4.1)
- [CVE-2016-7093](https://insights.sbomify.com/CVE-2016-7093/): Privilege escalation in n/a (high 8.2)
- [CVE-2016-7092](https://insights.sbomify.com/CVE-2016-7092/): Privilege escalation in n/a (high 8.2)
- [CVE-2016-7091](https://insights.sbomify.com/CVE-2016-7091/): Information disclosure in n/a (medium 4.4)
- [CVE-2016-7090](https://insights.sbomify.com/CVE-2016-7090/): Information disclosure in n/a (medium 4.0)
- [CVE-2016-7089](https://insights.sbomify.com/CVE-2016-7089/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-7087](https://insights.sbomify.com/CVE-2016-7087/): Path traversal in n/a (medium 5.3)
- [CVE-2016-7086](https://insights.sbomify.com/CVE-2016-7086/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-7085](https://insights.sbomify.com/CVE-2016-7085/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-7084](https://insights.sbomify.com/CVE-2016-7084/): Memory corruption in n/a (high 7.8)
- [CVE-2016-7083](https://insights.sbomify.com/CVE-2016-7083/): Memory corruption in n/a (high 7.8)
- [CVE-2016-7082](https://insights.sbomify.com/CVE-2016-7082/): Memory corruption in n/a (high 7.8)
- [CVE-2016-7081](https://insights.sbomify.com/CVE-2016-7081/): Memory corruption in n/a (high 7.8)
- [CVE-2016-7080](https://insights.sbomify.com/CVE-2016-7080/): Null dereference in n/a (high 7.8)
- [CVE-2016-7079](https://insights.sbomify.com/CVE-2016-7079/): Null dereference in n/a (high 7.8)
- [CVE-2016-7078](https://insights.sbomify.com/CVE-2016-7078/): Missing authorization in foreman (medium 4.3)
- [CVE-2016-7077](https://insights.sbomify.com/CVE-2016-7077/): Missing authorization in foreman (medium 4.3)
- [CVE-2016-7076](https://insights.sbomify.com/CVE-2016-7076/): Security feature bypass in sudo (medium 6.4)
- [CVE-2016-7075](https://insights.sbomify.com/CVE-2016-7075/): Auth bypass in OpenShift (high 7.5)
- [CVE-2016-7074](https://insights.sbomify.com/CVE-2016-7074/): Security feature bypass in pdns (medium 5.3)
- [CVE-2016-7073](https://insights.sbomify.com/CVE-2016-7073/): Security feature bypass in pdns (medium 5.3)
- [CVE-2016-7072](https://insights.sbomify.com/CVE-2016-7072/): Denial of service in pdns (medium 5.3)
- [CVE-2016-7071](https://insights.sbomify.com/CVE-2016-7071/): Missing authorization in CFME (high 8.8)
- [CVE-2016-7070](https://insights.sbomify.com/CVE-2016-7070/): Privilege escalation in Ansible Tower (high 8.0)
- [CVE-2016-7069](https://insights.sbomify.com/CVE-2016-7069/): Denial of service in dnsdist (medium 5.9)
- [CVE-2016-7068](https://insights.sbomify.com/CVE-2016-7068/): Denial of service in pdns (medium 5.3)
- [CVE-2016-7067](https://insights.sbomify.com/CVE-2016-7067/): Cross-site request forgery in monit (medium 6.5)
- [CVE-2016-7066](https://insights.sbomify.com/CVE-2016-7066/): Misconfiguration in JBoss Enterprise Application Platform (high 7.8)
- [CVE-2016-7065](https://insights.sbomify.com/CVE-2016-7065/): Deserialization in n/a (high 8.8)
- [CVE-2016-7064](https://insights.sbomify.com/CVE-2016-7064/): Security feature bypass in pritunl-client-electron (high 7.5)
- [CVE-2016-7063](https://insights.sbomify.com/CVE-2016-7063/): Path traversal in pritunl-client-electron (critical 9.8)
- [CVE-2016-7062](https://insights.sbomify.com/CVE-2016-7062/): Information disclosure in n/a (high 7.8)
- [CVE-2016-7061](https://insights.sbomify.com/CVE-2016-7061/): Information disclosure in EAP (low 3.5)
- [CVE-2016-7060](https://insights.sbomify.com/CVE-2016-7060/): Information disclosure in n/a (medium 4.6)
- [CVE-2016-7056](https://insights.sbomify.com/CVE-2016-7056/): Weak cryptography in openssl (medium 5.5)
- [CVE-2016-7055](https://insights.sbomify.com/CVE-2016-7055/): Other in n/a (medium 5.9)
- [CVE-2016-7054](https://insights.sbomify.com/CVE-2016-7054/): ChaCha20/Poly1305 heap-buffer-overflow (high 7.5)
- [CVE-2016-7053](https://insights.sbomify.com/CVE-2016-7053/): CMS Null dereference (high 7.5)
- [CVE-2016-7052](https://insights.sbomify.com/CVE-2016-7052/): Null dereference in n/a (high 7.5)
- [CVE-2016-7051](https://insights.sbomify.com/CVE-2016-7051/): jackson-dataformat-xml vulnerable to server side request forgery (SSRF) (high 8.6)
- [CVE-2016-7050](https://insights.sbomify.com/CVE-2016-7050/): Deserialization in n/a (critical 9.8)
- [CVE-2016-7048](https://insights.sbomify.com/CVE-2016-7048/): Code injection in n/a (high 8.1)
- [CVE-2016-7047](https://insights.sbomify.com/CVE-2016-7047/): Missing authorization in cfme (medium 4.3)
- [CVE-2016-7046](https://insights.sbomify.com/CVE-2016-7046/): Undertow Uncaught Exception vulnerability (medium 5.9)
- [CVE-2016-7045](https://insights.sbomify.com/CVE-2016-7045/): Memory corruption in n/a (high 7.5)
- [CVE-2016-7044](https://insights.sbomify.com/CVE-2016-7044/): Memory corruption in n/a (high 7.5)
- [CVE-2016-7043](https://insights.sbomify.com/CVE-2016-7043/): Password in config file in KIE server (medium 5.9)
- [CVE-2016-7042](https://insights.sbomify.com/CVE-2016-7042/): Memory corruption in n/a (medium 6.2)
- [CVE-2016-7041](https://insights.sbomify.com/CVE-2016-7041/): Path traversal in Drools Workbench (medium 6.5)
- [CVE-2016-7040](https://insights.sbomify.com/CVE-2016-7040/): Command injection in n/a (high 8.8)
- [CVE-2016-7039](https://insights.sbomify.com/CVE-2016-7039/): Denial of service in n/a (high 7.5)
- [CVE-2016-7038](https://insights.sbomify.com/CVE-2016-7038/): Moodle Weak Password Recovery Mechanism for Forgotten Password (high 7.3)
- [CVE-2016-7037](https://insights.sbomify.com/CVE-2016-7037/): Security feature bypass in n/a (high 7.5)
- [CVE-2016-7036](https://insights.sbomify.com/CVE-2016-7036/): python-jose failure to use a constant time comparison for HMAC keys (critical 9.8)
- [CVE-2016-7035](https://insights.sbomify.com/CVE-2016-7035/): Missing authorization in pacemaker (high 8.8)
- [CVE-2016-7034](https://insights.sbomify.com/CVE-2016-7034/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2016-7033](https://insights.sbomify.com/CVE-2016-7033/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-7032](https://insights.sbomify.com/CVE-2016-7032/): Security feature bypass in n/a (high 7.0)
- [CVE-2016-7031](https://insights.sbomify.com/CVE-2016-7031/): Information disclosure in n/a (high 7.5)
- [CVE-2016-7030](https://insights.sbomify.com/CVE-2016-7030/): Denial of service in n/a (high 7.5)
- [CVE-2016-7020](https://insights.sbomify.com/CVE-2016-7020/): Use after free in n/a (high 8.8)
- [CVE-2016-7019](https://insights.sbomify.com/CVE-2016-7019/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7018](https://insights.sbomify.com/CVE-2016-7018/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7017](https://insights.sbomify.com/CVE-2016-7017/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7016](https://insights.sbomify.com/CVE-2016-7016/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7015](https://insights.sbomify.com/CVE-2016-7015/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7014](https://insights.sbomify.com/CVE-2016-7014/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7013](https://insights.sbomify.com/CVE-2016-7013/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7012](https://insights.sbomify.com/CVE-2016-7012/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7011](https://insights.sbomify.com/CVE-2016-7011/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7010](https://insights.sbomify.com/CVE-2016-7010/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7009](https://insights.sbomify.com/CVE-2016-7009/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7008](https://insights.sbomify.com/CVE-2016-7008/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7007](https://insights.sbomify.com/CVE-2016-7007/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7006](https://insights.sbomify.com/CVE-2016-7006/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7005](https://insights.sbomify.com/CVE-2016-7005/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7004](https://insights.sbomify.com/CVE-2016-7004/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7003](https://insights.sbomify.com/CVE-2016-7003/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7002](https://insights.sbomify.com/CVE-2016-7002/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-7001](https://insights.sbomify.com/CVE-2016-7001/): Memory corruption in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/21/