# Vulnerabilities published in 2016 - [CVE-2016-6896](https://insights.sbomify.com/CVE-2016-6896/): Path traversal in n/a (high 7.1) - [CVE-2016-6894](https://insights.sbomify.com/CVE-2016-6894/): Denial of service in n/a (high 7.5) - [CVE-2016-6893](https://insights.sbomify.com/CVE-2016-6893/): Cross-site request forgery in n/a (high 8.8) - [CVE-2016-6892](https://insights.sbomify.com/CVE-2016-6892/): Use after free in n/a (high 7.5) - [CVE-2016-6891](https://insights.sbomify.com/CVE-2016-6891/): Denial of service in n/a (high 7.5) - [CVE-2016-6890](https://insights.sbomify.com/CVE-2016-6890/): Memory corruption in n/a (critical 9.8) - [CVE-2016-6888](https://insights.sbomify.com/CVE-2016-6888/): Integer overflow in n/a (medium 4.4) - [CVE-2016-6887](https://insights.sbomify.com/CVE-2016-6887/): Weak cryptography in n/a (medium 5.9) - [CVE-2016-6886](https://insights.sbomify.com/CVE-2016-6886/): Denial of service in n/a (high 7.5) - [CVE-2016-6885](https://insights.sbomify.com/CVE-2016-6885/): Use after free in n/a (high 7.5) - [CVE-2016-6884](https://insights.sbomify.com/CVE-2016-6884/): Denial of service in n/a (medium 6.5) - [CVE-2016-6883](https://insights.sbomify.com/CVE-2016-6883/): Information disclosure in n/a (medium 5.9) - [CVE-2016-6882](https://insights.sbomify.com/CVE-2016-6882/): Information disclosure in n/a (medium 5.9) - [CVE-2016-6881](https://insights.sbomify.com/CVE-2016-6881/): Denial of service in n/a (medium 5.5) - [CVE-2016-6879](https://insights.sbomify.com/CVE-2016-6879/): Security feature bypass in n/a (high 7.5) - [CVE-2016-6878](https://insights.sbomify.com/CVE-2016-6878/): Other in n/a (critical 9.8) - [CVE-2016-6877](https://insights.sbomify.com/CVE-2016-6877/): Open redirect in n/a (medium 5.3) - [CVE-2016-6876](https://insights.sbomify.com/CVE-2016-6876/): Denial of service in n/a (high 7.5) - [CVE-2016-6875](https://insights.sbomify.com/CVE-2016-6875/): Denial of service in n/a (critical 9.8) - [CVE-2016-6874](https://insights.sbomify.com/CVE-2016-6874/): The array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, related to recursion. (critical 9.8) - [CVE-2016-6873](https://insights.sbomify.com/CVE-2016-6873/): Denial of service in n/a (critical 9.8) - [CVE-2016-6872](https://insights.sbomify.com/CVE-2016-6872/): Integer overflow in n/a (critical 9.8) - [CVE-2016-6871](https://insights.sbomify.com/CVE-2016-6871/): Integer overflow in n/a (critical 9.8) - [CVE-2016-6870](https://insights.sbomify.com/CVE-2016-6870/): Memory corruption in n/a (critical 9.8) - [CVE-2016-6866](https://insights.sbomify.com/CVE-2016-6866/): Null dereference in n/a (high 7.5) - [CVE-2016-6859](https://insights.sbomify.com/CVE-2016-6859/): Information disclosure in n/a (medium 4.3) - [CVE-2016-6858](https://insights.sbomify.com/CVE-2016-6858/): Cross-site scripting in n/a (medium 5.4) - [CVE-2016-6857](https://insights.sbomify.com/CVE-2016-6857/): Cross-site scripting in n/a (medium 5.4) - [CVE-2016-6856](https://insights.sbomify.com/CVE-2016-6856/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6855](https://insights.sbomify.com/CVE-2016-6855/): Memory corruption in n/a (high 7.5) - [CVE-2016-6854](https://insights.sbomify.com/CVE-2016-6854/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6853](https://insights.sbomify.com/CVE-2016-6853/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6852](https://insights.sbomify.com/CVE-2016-6852/): Information disclosure in n/a (medium 4.3) - [CVE-2016-6851](https://insights.sbomify.com/CVE-2016-6851/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6850](https://insights.sbomify.com/CVE-2016-6850/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6848](https://insights.sbomify.com/CVE-2016-6848/): Code injection in n/a (medium 5.5) - [CVE-2016-6847](https://insights.sbomify.com/CVE-2016-6847/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6846](https://insights.sbomify.com/CVE-2016-6846/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6845](https://insights.sbomify.com/CVE-2016-6845/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6844](https://insights.sbomify.com/CVE-2016-6844/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6843](https://insights.sbomify.com/CVE-2016-6843/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6842](https://insights.sbomify.com/CVE-2016-6842/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6840](https://insights.sbomify.com/CVE-2016-6840/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6839](https://insights.sbomify.com/CVE-2016-6839/): Other in n/a (medium 6.1) - [CVE-2016-6838](https://insights.sbomify.com/CVE-2016-6838/): Weak cryptography in n/a (high 7.5) - [CVE-2016-6837](https://insights.sbomify.com/CVE-2016-6837/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-6836](https://insights.sbomify.com/CVE-2016-6836/): Information disclosure in n/a (medium 6.0) - [CVE-2016-6835](https://insights.sbomify.com/CVE-2016-6835/): Denial of service in n/a (medium 6.0) - [CVE-2016-6834](https://insights.sbomify.com/CVE-2016-6834/): Denial of service in n/a (medium 4.4) - [CVE-2016-6833](https://insights.sbomify.com/CVE-2016-6833/): Use after free in n/a (medium 4.4) - [CVE-2016-6832](https://insights.sbomify.com/CVE-2016-6832/): Memory corruption in n/a (medium 5.5) - [CVE-2016-6831](https://insights.sbomify.com/CVE-2016-6831/): Denial of service in n/a (high 7.5) - [CVE-2016-6830](https://insights.sbomify.com/CVE-2016-6830/): Memory corruption in n/a (critical 9.8) - [CVE-2016-6829](https://insights.sbomify.com/CVE-2016-6829/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2016-6828](https://insights.sbomify.com/CVE-2016-6828/): Use after free in n/a (medium 5.5) - [CVE-2016-6827](https://insights.sbomify.com/CVE-2016-6827/): Information disclosure in n/a (medium 6.5) - [CVE-2016-6826](https://insights.sbomify.com/CVE-2016-6826/): Denial of service in n/a (medium 6.5) - [CVE-2016-6825](https://insights.sbomify.com/CVE-2016-6825/): Auth bypass in n/a (critical 9.8) - [CVE-2016-6824](https://insights.sbomify.com/CVE-2016-6824/): Denial of service in n/a (medium 6.5) - [CVE-2016-6823](https://insights.sbomify.com/CVE-2016-6823/): Integer overflow in n/a (high 7.5) - [CVE-2016-6820](https://insights.sbomify.com/CVE-2016-6820/): Information disclosure in n/a (high 7.5) - [CVE-2016-6818](https://insights.sbomify.com/CVE-2016-6818/): SQL injection in n/a (critical 9.8) - [CVE-2016-6817](https://insights.sbomify.com/CVE-2016-6817/): Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat (high 7.5) - [CVE-2016-6816](https://insights.sbomify.com/CVE-2016-6816/): Improper Input Validation in Apache Tomcat (high 7.1) - [CVE-2016-6815](https://insights.sbomify.com/CVE-2016-6815/): Moderate severity vulnerability that affects org.apache.ranger:ranger (medium 6.5) - [CVE-2016-6814](https://insights.sbomify.com/CVE-2016-6814/): Deserialization of Untrusted Data in Groovy (critical 9.8) - [CVE-2016-6813](https://insights.sbomify.com/CVE-2016-6813/): Missing authorization in Apache CloudStack (critical 9.8) - [CVE-2016-6812](https://insights.sbomify.com/CVE-2016-6812/): Improper Neutralization of Input During Web Page Generation in Apache CXF (medium 6.1) - [CVE-2016-6811](https://insights.sbomify.com/CVE-2016-6811/): Insecure Inherited Permissions in Apache Hadoop (high 8.8) - [CVE-2016-6810](https://insights.sbomify.com/CVE-2016-6810/): Improper Neutralization of Input During Web Page Generation Apache ActiveMQ (medium 6.1) - [CVE-2016-6809](https://insights.sbomify.com/CVE-2016-6809/): Apache Tika allows Java code execution for serialized objects embedded in MATLAB files (critical 9.8) - [CVE-2016-6808](https://insights.sbomify.com/CVE-2016-6808/): Memory corruption in n/a (critical 9.8) - [CVE-2016-6807](https://insights.sbomify.com/CVE-2016-6807/): Apache Ambari Improper Access Control (critical 9.8) - [CVE-2016-6806](https://insights.sbomify.com/CVE-2016-6806/): Apache Wicket vulnerable to CSRF attacks (high 8.8) - [CVE-2016-6805](https://insights.sbomify.com/CVE-2016-6805/): Moderate severity vulnerability that affects org.apache.ignite:ignite-core (medium 5.9) - [CVE-2016-6804](https://insights.sbomify.com/CVE-2016-6804/): Privilege escalation in Apache OpenOffice (high 7.8) - [CVE-2016-6803](https://insights.sbomify.com/CVE-2016-6803/): Path traversal in Apache OpenOffice (high 7.8) - [CVE-2016-6802](https://insights.sbomify.com/CVE-2016-6802/): Improper Access Control in Apache Shiro (high 7.5) - [CVE-2016-6801](https://insights.sbomify.com/CVE-2016-6801/): Apache Jackrabbit Authentication Hijacking Vulnerability (high 8.8) - [CVE-2016-6800](https://insights.sbomify.com/CVE-2016-6800/): Cross-site scripting in Apache OFBiz (medium 6.1) - [CVE-2016-6799](https://insights.sbomify.com/CVE-2016-6799/): Information Exposure in cordova-android (high 7.5) - [CVE-2016-6798](https://insights.sbomify.com/CVE-2016-6798/): XML External Entity Reference in Apache Sling (critical 9.8) - [CVE-2016-6797](https://insights.sbomify.com/CVE-2016-6797/): Incorrect Authorization in Apache Tomcat (high 7.5) - [CVE-2016-6796](https://insights.sbomify.com/CVE-2016-6796/): Apache Tomcat vulnerable to SecurityManager bypass (high 7.5) - [CVE-2016-6795](https://insights.sbomify.com/CVE-2016-6795/): Path Traversal in Apache Struts (critical 9.8) - [CVE-2016-6794](https://insights.sbomify.com/CVE-2016-6794/): System Property Disclosure in Apache Tomcat (medium 5.3) - [CVE-2016-6793](https://insights.sbomify.com/CVE-2016-6793/): Deserialization in n/a (critical 9.1) - [CVE-2016-6791](https://insights.sbomify.com/CVE-2016-6791/): Privilege escalation in Android (high 7.0) - [CVE-2016-6790](https://insights.sbomify.com/CVE-2016-6790/): Privilege escalation in Android Kernel-3.18 (high 7.8) - [CVE-2016-6789](https://insights.sbomify.com/CVE-2016-6789/): Privilege escalation in Android (high 7.8) - [CVE-2016-6788](https://insights.sbomify.com/CVE-2016-6788/): Privilege escalation in Android (high 7.0) - [CVE-2016-6787](https://insights.sbomify.com/CVE-2016-6787/): Race condition in n/a (high 7.0) - [CVE-2016-6786](https://insights.sbomify.com/CVE-2016-6786/): Race condition in n/a (high 7.0) - [CVE-2016-6785](https://insights.sbomify.com/CVE-2016-6785/): Privilege escalation in Android (high 7.0) - [CVE-2016-6784](https://insights.sbomify.com/CVE-2016-6784/): Privilege escalation in Android Android-N/A (high 7.0) - [CVE-2016-6783](https://insights.sbomify.com/CVE-2016-6783/): Privilege escalation in Android (high 7.0) - [CVE-2016-6782](https://insights.sbomify.com/CVE-2016-6782/): Privilege escalation in Android (high 7.0) - [CVE-2016-6781](https://insights.sbomify.com/CVE-2016-6781/): Privilege escalation in Android (high 7.0) - [CVE-2016-6780](https://insights.sbomify.com/CVE-2016-6780/): Privilege escalation in Android (high 7.0) - [CVE-2016-6779](https://insights.sbomify.com/CVE-2016-6779/): Privilege escalation in Android Kernel-3.10 (high 7.0) --- From sbomify Insights: https://insights.sbomify.com/years/2016/page/23/