# Vulnerabilities published in 2016


- [CVE-2016-6677](https://insights.sbomify.com/CVE-2016-6677/): Information disclosure in n/a (medium 5.5)
- [CVE-2016-6676](https://insights.sbomify.com/CVE-2016-6676/): Memory corruption in n/a (high 7.8)
- [CVE-2016-6675](https://insights.sbomify.com/CVE-2016-6675/): Memory corruption in n/a (high 7.8)
- [CVE-2016-6674](https://insights.sbomify.com/CVE-2016-6674/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-6673](https://insights.sbomify.com/CVE-2016-6673/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-6672](https://insights.sbomify.com/CVE-2016-6672/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-6671](https://insights.sbomify.com/CVE-2016-6671/): Memory corruption in n/a (high 7.8)
- [CVE-2016-6670](https://insights.sbomify.com/CVE-2016-6670/): Weak cryptography in n/a (medium 5.3)
- [CVE-2016-6669](https://insights.sbomify.com/CVE-2016-6669/): Memory corruption in n/a (high 7.5)
- [CVE-2016-6668](https://insights.sbomify.com/CVE-2016-6668/): Information disclosure in n/a (high 7.5)
- [CVE-2016-6667](https://insights.sbomify.com/CVE-2016-6667/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2016-6664](https://insights.sbomify.com/CVE-2016-6664/): Path traversal in n/a (high 7.0)
- [CVE-2016-6663](https://insights.sbomify.com/CVE-2016-6663/): Race condition in n/a (high 7.0)
- [CVE-2016-6662](https://insights.sbomify.com/CVE-2016-6662/): Privilege escalation in n/a (critical 9.8)
- [CVE-2016-6659](https://insights.sbomify.com/CVE-2016-6659/): Privilege escalation in Cloud Foundry v247 and earlier and UAA v3.9.2 & earlier and UAA bosh (uaa-release) v23 & earlier (high 8.1)
- [CVE-2016-6658](https://insights.sbomify.com/CVE-2016-6658/): Information disclosure in n/a (critical 9.6)
- [CVE-2016-6657](https://insights.sbomify.com/CVE-2016-6657/): Open redirect in PCF Elastic Runtime 1.8.x versions prior to 1.8.12 and PCF Ops Manager 1.7.x versions prior to 1.7.18 and 1.8.x versions prior to 1.8.10 (high 7.4)
- [CVE-2016-6656](https://insights.sbomify.com/CVE-2016-6656/): Command injection in Pivotal Greenplum 4.3.0.0 to 4.3.9.1 and older versions that are end of life (high 7.2)
- [CVE-2016-6655](https://insights.sbomify.com/CVE-2016-6655/): Command injection in Cloud Foundry (critical 9.8)
- [CVE-2016-6653](https://insights.sbomify.com/CVE-2016-6653/): Information disclosure in n/a (high 7.5)
- [CVE-2016-6652](https://insights.sbomify.com/CVE-2016-6652/): Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA (medium 5.6)
- [CVE-2016-6651](https://insights.sbomify.com/CVE-2016-6651/): Privilege escalation in n/a (high 8.8)
- [CVE-2016-6650](https://insights.sbomify.com/CVE-2016-6650/): Security feature bypass in EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 (high 7.5)
- [CVE-2016-6649](https://insights.sbomify.com/CVE-2016-6649/): Command injection in EMC RecoverPoint and EMC RecoverPoint for Virtual Machines EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 (medium 6.7)
- [CVE-2016-6648](https://insights.sbomify.com/CVE-2016-6648/): Information disclosure in EMC RecoverPoint and EMC RecoverPoint for Virtual Machines EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 (medium 4.4)
- [CVE-2016-6647](https://insights.sbomify.com/CVE-2016-6647/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-6646](https://insights.sbomify.com/CVE-2016-6646/): Code injection in n/a (critical 9.8)
- [CVE-2016-6645](https://insights.sbomify.com/CVE-2016-6645/): Code injection in n/a (high 8.8)
- [CVE-2016-6644](https://insights.sbomify.com/CVE-2016-6644/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-6643](https://insights.sbomify.com/CVE-2016-6643/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-6642](https://insights.sbomify.com/CVE-2016-6642/): Cross-site request forgery in n/a (medium 6.1)
- [CVE-2016-6641](https://insights.sbomify.com/CVE-2016-6641/): Cross-site scripting in n/a (high 7.6)
- [CVE-2016-6639](https://insights.sbomify.com/CVE-2016-6639/): Information disclosure in n/a (high 7.5)
- [CVE-2016-6637](https://insights.sbomify.com/CVE-2016-6637/): Cloud Foundry vulnerable to Cross-Site Request Forgery (critical 9.6)
- [CVE-2016-6636](https://insights.sbomify.com/CVE-2016-6636/): Open redirect in n/a (medium 5.3)
- [CVE-2016-6635](https://insights.sbomify.com/CVE-2016-6635/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2016-6634](https://insights.sbomify.com/CVE-2016-6634/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-6633](https://insights.sbomify.com/CVE-2016-6633/): phpMyAdmin Remote code execution vulnerability when PHP is running with dbase extension (high 8.1)
- [CVE-2016-6632](https://insights.sbomify.com/CVE-2016-6632/): phpMyAdmin Denial of service (DOS) attack with dbase extension (medium 5.9)
- [CVE-2016-6631](https://insights.sbomify.com/CVE-2016-6631/): Command injection in n/a (high 7.5)
- [CVE-2016-6630](https://insights.sbomify.com/CVE-2016-6630/): Denial of service in n/a (medium 6.5)
- [CVE-2016-6629](https://insights.sbomify.com/CVE-2016-6629/): phpMyAdmin Authentication Bypass (critical 9.8)
- [CVE-2016-6628](https://insights.sbomify.com/CVE-2016-6628/): phpMyAdmin Reflected File Download attack (medium 6.3)
- [CVE-2016-6627](https://insights.sbomify.com/CVE-2016-6627/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-6626](https://insights.sbomify.com/CVE-2016-6626/): Open redirect in n/a (medium 5.4)
- [CVE-2016-6625](https://insights.sbomify.com/CVE-2016-6625/): phpMyAdmin allows to detect if user is logged in (medium 4.3)
- [CVE-2016-6624](https://insights.sbomify.com/CVE-2016-6624/): phpMyAdmin IPv6 and proxy server IP-based authentication rule circumvention (medium 5.9)
- [CVE-2016-6623](https://insights.sbomify.com/CVE-2016-6623/): phpMyAdmin DoS Vulnerability (medium 6.5)
- [CVE-2016-6622](https://insights.sbomify.com/CVE-2016-6622/): phpMyAdmin DoS Vulnerability (medium 5.9)
- [CVE-2016-6621](https://insights.sbomify.com/CVE-2016-6621/): phpMyAdmin server-side request forgery (SSRF) (high 8.6)
- [CVE-2016-6620](https://insights.sbomify.com/CVE-2016-6620/): Deserialization in n/a (critical 9.8)
- [CVE-2016-6619](https://insights.sbomify.com/CVE-2016-6619/): SQL injection in n/a (high 8.8)
- [CVE-2016-6618](https://insights.sbomify.com/CVE-2016-6618/): phpMyAdmin Denial of service (DOS) attack in transformation feature (medium 6.5)
- [CVE-2016-6617](https://insights.sbomify.com/CVE-2016-6617/): SQL injection in n/a (high 8.1)
- [CVE-2016-6616](https://insights.sbomify.com/CVE-2016-6616/): SQL injection in n/a (high 7.5)
- [CVE-2016-6615](https://insights.sbomify.com/CVE-2016-6615/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-6614](https://insights.sbomify.com/CVE-2016-6614/): Path traversal in n/a (medium 6.8)
- [CVE-2016-6613](https://insights.sbomify.com/CVE-2016-6613/): phpMyAdmin Local file exposure through symlinks with UploadDir (medium 5.3)
- [CVE-2016-6612](https://insights.sbomify.com/CVE-2016-6612/): phpMyAdmin Local file exposure (medium 6.5)
- [CVE-2016-6611](https://insights.sbomify.com/CVE-2016-6611/): SQL injection in n/a (high 8.1)
- [CVE-2016-6610](https://insights.sbomify.com/CVE-2016-6610/): Information disclosure in n/a (medium 4.3)
- [CVE-2016-6609](https://insights.sbomify.com/CVE-2016-6609/): phpMyAdmin PHP code injection (high 8.8)
- [CVE-2016-6608](https://insights.sbomify.com/CVE-2016-6608/): phpMyAdmin Cross-site Scripting (XSS) (medium 6.1)
- [CVE-2016-6607](https://insights.sbomify.com/CVE-2016-6607/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-6606](https://insights.sbomify.com/CVE-2016-6606/): Weak cryptography in n/a (high 8.1)
- [CVE-2016-6605](https://insights.sbomify.com/CVE-2016-6605/): Auth bypass in n/a (high 7.5)
- [CVE-2016-6604](https://insights.sbomify.com/CVE-2016-6604/): Null dereference in n/a (critical 9.8)
- [CVE-2016-6603](https://insights.sbomify.com/CVE-2016-6603/): Auth bypass in n/a (critical 9.8)
- [CVE-2016-6602](https://insights.sbomify.com/CVE-2016-6602/): Weak cryptography in n/a (critical 9.8)
- [CVE-2016-6601](https://insights.sbomify.com/CVE-2016-6601/): Path traversal in n/a (high 7.5)
- [CVE-2016-6600](https://insights.sbomify.com/CVE-2016-6600/): Path traversal in n/a (critical 9.8)
- [CVE-2016-6599](https://insights.sbomify.com/CVE-2016-6599/): Information disclosure in n/a (critical 9.8)
- [CVE-2016-6598](https://insights.sbomify.com/CVE-2016-6598/): File upload in n/a (critical 9.8)
- [CVE-2016-6597](https://insights.sbomify.com/CVE-2016-6597/): Server-side request forgery in n/a (high 8.6)
- [CVE-2016-6595](https://insights.sbomify.com/CVE-2016-6595/): Denial of service in n/a (medium 6.5)
- [CVE-2016-6594](https://insights.sbomify.com/CVE-2016-6594/): Security feature bypass in n/a (high 7.5)
- [CVE-2016-6593](https://insights.sbomify.com/CVE-2016-6593/): Code injection in VIP Access Desktop (high 7.8)
- [CVE-2016-6592](https://insights.sbomify.com/CVE-2016-6592/): Other in Norton Download Manager (high 7.8)
- [CVE-2016-6591](https://insights.sbomify.com/CVE-2016-6591/): Security feature bypass in Norton App Lock (high 7.1)
- [CVE-2016-6590](https://insights.sbomify.com/CVE-2016-6590/): Privilege escalation in Encryption Desktop (high 7.8)
- [CVE-2016-6589](https://insights.sbomify.com/CVE-2016-6589/): Denial of service in IT Management Suite (medium 6.5)
- [CVE-2016-6588](https://insights.sbomify.com/CVE-2016-6588/): Cross-site scripting in IT Management Suite (medium 5.4)
- [CVE-2016-6587](https://insights.sbomify.com/CVE-2016-6587/): Information disclosure in Norton Mobile Security for Android (medium 5.5)
- [CVE-2016-6586](https://insights.sbomify.com/CVE-2016-6586/): Security feature bypass in Norton Mobile Security for Android (low 3.7)
- [CVE-2016-6585](https://insights.sbomify.com/CVE-2016-6585/): Denial of service in Norton Mobile Security for Android (medium 5.3)
- [CVE-2016-6582](https://insights.sbomify.com/CVE-2016-6582/): Doorkeeper is vulnerable to replay attacks (critical 9.1)
- [CVE-2016-6581](https://insights.sbomify.com/CVE-2016-6581/): HPACK Denial of Service vulnerability (HPACK Bomb) (high 7.5)
- [CVE-2016-6580](https://insights.sbomify.com/CVE-2016-6580/): priority vulnerable to denial of service (high 7.5)
- [CVE-2016-6578](https://insights.sbomify.com/CVE-2016-6578/): CodeLathe FileCloud, version 13.0.0.32841 and earlier, is vulnerable to cross-site request forgery (CSRF) (high 8.8)
- [CVE-2016-6567](https://insights.sbomify.com/CVE-2016-6567/): Code injection in Ethernet Download Manager (critical 9.8)
- [CVE-2016-6566](https://insights.sbomify.com/CVE-2016-6566/): SQL injection in eTRAKiT3 (critical 9.8)
- [CVE-2016-6565](https://insights.sbomify.com/CVE-2016-6565/): File upload in NextGen Gallery plugin (high 7.5)
- [CVE-2016-6564](https://insights.sbomify.com/CVE-2016-6564/): Code injection in Android software (high 8.1)
- [CVE-2016-6563](https://insights.sbomify.com/CVE-2016-6563/): D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action (critical 9.8)
- [CVE-2016-6562](https://insights.sbomify.com/CVE-2016-6562/): Security feature bypass in Mobility Client Andoid (high 7.5)
- [CVE-2016-6561](https://insights.sbomify.com/CVE-2016-6561/): Null dereference in osnet-incorporation (high 7.5)
- [CVE-2016-6560](https://insights.sbomify.com/CVE-2016-6560/): Integer overflow in osnet-incorporation (high 8.6)
- [CVE-2016-6559](https://insights.sbomify.com/CVE-2016-6559/): The BSD libc library's link_ntoa() function may be vulnerable to a classic buffer overflow (critical 9.8)
- [CVE-2016-6558](https://insights.sbomify.com/CVE-2016-6558/): The ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, is vulnerable to command injection (critical 9.8)
- [CVE-2016-6557](https://insights.sbomify.com/CVE-2016-6557/): Cross-site request forgery in RP-AC52 Access Point (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/25/