# Vulnerabilities published in 2016


- [CVE-2016-6331](https://insights.sbomify.com/CVE-2016-6331/): Missing authorization in n/a (high 7.5)
- [CVE-2016-6330](https://insights.sbomify.com/CVE-2016-6330/): Deserialization in n/a (critical 9.8)
- [CVE-2016-6329](https://insights.sbomify.com/CVE-2016-6329/): Weak cryptography in n/a (medium 5.9)
- [CVE-2016-6328](https://insights.sbomify.com/CVE-2016-6328/): Integer overflow in libexif (medium 6.1)
- [CVE-2016-6327](https://insights.sbomify.com/CVE-2016-6327/): Null dereference in n/a (medium 5.5)
- [CVE-2016-6325](https://insights.sbomify.com/CVE-2016-6325/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-6323](https://insights.sbomify.com/CVE-2016-6323/): Denial of service in n/a (high 7.5)
- [CVE-2016-6322](https://insights.sbomify.com/CVE-2016-6322/): Information disclosure in n/a (high 8.4)
- [CVE-2016-6321](https://insights.sbomify.com/CVE-2016-6321/): Path traversal in n/a (high 7.5)
- [CVE-2016-6320](https://insights.sbomify.com/CVE-2016-6320/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-6319](https://insights.sbomify.com/CVE-2016-6319/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-6318](https://insights.sbomify.com/CVE-2016-6318/): Memory corruption in n/a (high 7.8)
- [CVE-2016-6317](https://insights.sbomify.com/CVE-2016-6317/): ActiveRecord in Ruby on Rails allows database-query bypass (high 7.5)
- [CVE-2016-6316](https://insights.sbomify.com/CVE-2016-6316/): actionview Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2016-6313](https://insights.sbomify.com/CVE-2016-6313/): Weak cryptography in n/a (medium 5.3)
- [CVE-2016-6312](https://insights.sbomify.com/CVE-2016-6312/): Denial of service in n/a (medium 6.5)
- [CVE-2016-6311](https://insights.sbomify.com/CVE-2016-6311/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-6310](https://insights.sbomify.com/CVE-2016-6310/): Information disclosure in n/a (medium 5.5)
- [CVE-2016-6309](https://insights.sbomify.com/CVE-2016-6309/): Use after free in n/a (critical 9.8)
- [CVE-2016-6308](https://insights.sbomify.com/CVE-2016-6308/): Denial of service in n/a (medium 5.9)
- [CVE-2016-6307](https://insights.sbomify.com/CVE-2016-6307/): Denial of service in n/a (medium 5.9)
- [CVE-2016-6306](https://insights.sbomify.com/CVE-2016-6306/): Denial of service in n/a (medium 5.9)
- [CVE-2016-6305](https://insights.sbomify.com/CVE-2016-6305/): Denial of service in n/a (high 7.5)
- [CVE-2016-6304](https://insights.sbomify.com/CVE-2016-6304/): Denial of service in n/a (high 7.5)
- [CVE-2016-6303](https://insights.sbomify.com/CVE-2016-6303/): Integer overflow in n/a (critical 9.8)
- [CVE-2016-6302](https://insights.sbomify.com/CVE-2016-6302/): Denial of service in n/a (high 7.5)
- [CVE-2016-6301](https://insights.sbomify.com/CVE-2016-6301/): Denial of service in n/a (high 7.5)
- [CVE-2016-6299](https://insights.sbomify.com/CVE-2016-6299/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-6298](https://insights.sbomify.com/CVE-2016-6298/): jwcrypto lacks the Random Filling protection mechanism (medium 5.3)
- [CVE-2016-6297](https://insights.sbomify.com/CVE-2016-6297/): Integer overflow in n/a (high 8.8)
- [CVE-2016-6296](https://insights.sbomify.com/CVE-2016-6296/): Integer overflow in n/a (critical 9.8)
- [CVE-2016-6295](https://insights.sbomify.com/CVE-2016-6295/): Use after free in n/a (critical 9.8)
- [CVE-2016-6294](https://insights.sbomify.com/CVE-2016-6294/): Denial of service in n/a (critical 9.8)
- [CVE-2016-6293](https://insights.sbomify.com/CVE-2016-6293/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-6292](https://insights.sbomify.com/CVE-2016-6292/): Null dereference in n/a (medium 6.5)
- [CVE-2016-6291](https://insights.sbomify.com/CVE-2016-6291/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-6290](https://insights.sbomify.com/CVE-2016-6290/): Use after free in n/a (critical 9.8)
- [CVE-2016-6289](https://insights.sbomify.com/CVE-2016-6289/): Integer overflow in n/a (high 7.8)
- [CVE-2016-6288](https://insights.sbomify.com/CVE-2016-6288/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-6287](https://insights.sbomify.com/CVE-2016-6287/): Server-side request forgery in n/a (high 7.5)
- [CVE-2016-6286](https://insights.sbomify.com/CVE-2016-6286/): Server-side request forgery in n/a (high 7.5)
- [CVE-2016-6285](https://insights.sbomify.com/CVE-2016-6285/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-6283](https://insights.sbomify.com/CVE-2016-6283/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-6277](https://insights.sbomify.com/CVE-2016-6277/): NETGEAR Multiple Routers Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2016-6276](https://insights.sbomify.com/CVE-2016-6276/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-6273](https://insights.sbomify.com/CVE-2016-6273/): Denial of service in n/a (high 7.5)
- [CVE-2016-6272](https://insights.sbomify.com/CVE-2016-6272/): Other in n/a (high 7.5)
- [CVE-2016-6271](https://insights.sbomify.com/CVE-2016-6271/): Security feature bypass in n/a (high 7.5)
- [CVE-2016-6270](https://insights.sbomify.com/CVE-2016-6270/): Command injection in n/a (high 8.8)
- [CVE-2016-6269](https://insights.sbomify.com/CVE-2016-6269/): Path traversal in n/a (critical 9.1)
- [CVE-2016-6268](https://insights.sbomify.com/CVE-2016-6268/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-6267](https://insights.sbomify.com/CVE-2016-6267/): Command injection in n/a (high 8.8)
- [CVE-2016-6266](https://insights.sbomify.com/CVE-2016-6266/): Command injection in n/a (high 8.8)
- [CVE-2016-6265](https://insights.sbomify.com/CVE-2016-6265/): Use after free in n/a (medium 5.5)
- [CVE-2016-6264](https://insights.sbomify.com/CVE-2016-6264/): Integer overflow in n/a (high 7.5)
- [CVE-2016-6263](https://insights.sbomify.com/CVE-2016-6263/): The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of serv (high 7.5)
- [CVE-2016-6262](https://insights.sbomify.com/CVE-2016-6262/): Information disclosure in n/a (high 7.5)
- [CVE-2016-6261](https://insights.sbomify.com/CVE-2016-6261/): Denial of service in n/a (high 7.5)
- [CVE-2016-6259](https://insights.sbomify.com/CVE-2016-6259/): Denial of service in n/a (medium 6.2)
- [CVE-2016-6258](https://insights.sbomify.com/CVE-2016-6258/): Privilege escalation in n/a (high 8.8)
- [CVE-2016-6257](https://insights.sbomify.com/CVE-2016-6257/): Weak cryptography in n/a (medium 6.5)
- [CVE-2016-6256](https://insights.sbomify.com/CVE-2016-6256/): XML external entity in n/a (critical 9.6)
- [CVE-2016-6255](https://insights.sbomify.com/CVE-2016-6255/): Path traversal in n/a (high 7.5)
- [CVE-2016-6254](https://insights.sbomify.com/CVE-2016-6254/): Memory corruption in n/a (critical 9.1)
- [CVE-2016-6253](https://insights.sbomify.com/CVE-2016-6253/): Path traversal in n/a (high 7.8)
- [CVE-2016-6252](https://insights.sbomify.com/CVE-2016-6252/): Integer overflow in n/a (high 7.8)
- [CVE-2016-6250](https://insights.sbomify.com/CVE-2016-6250/): Integer overflow in n/a (high 8.6)
- [CVE-2016-6249](https://insights.sbomify.com/CVE-2016-6249/): Information disclosure in F5 BIG-IP, REST Framework Logging (medium 5.3)
- [CVE-2016-6247](https://insights.sbomify.com/CVE-2016-6247/): Denial of service in n/a (medium 5.5)
- [CVE-2016-6246](https://insights.sbomify.com/CVE-2016-6246/): Denial of service in n/a (medium 4.4)
- [CVE-2016-6245](https://insights.sbomify.com/CVE-2016-6245/): Denial of service in n/a (medium 5.5)
- [CVE-2016-6244](https://insights.sbomify.com/CVE-2016-6244/): Denial of service in n/a (high 7.5)
- [CVE-2016-6243](https://insights.sbomify.com/CVE-2016-6243/): Denial of service in n/a (medium 5.5)
- [CVE-2016-6242](https://insights.sbomify.com/CVE-2016-6242/): Denial of service in n/a (medium 5.5)
- [CVE-2016-6241](https://insights.sbomify.com/CVE-2016-6241/): Integer overflow in n/a (high 7.8)
- [CVE-2016-6240](https://insights.sbomify.com/CVE-2016-6240/): Integer overflow in n/a (high 7.8)
- [CVE-2016-6239](https://insights.sbomify.com/CVE-2016-6239/): Denial of service in n/a (medium 5.5)
- [CVE-2016-6238](https://insights.sbomify.com/CVE-2016-6238/): Denial of service in n/a (medium 5.5)
- [CVE-2016-6237](https://insights.sbomify.com/CVE-2016-6237/): Memory corruption in n/a (medium 5.5)
- [CVE-2016-6236](https://insights.sbomify.com/CVE-2016-6236/): Denial of service in n/a (medium 5.5)
- [CVE-2016-6235](https://insights.sbomify.com/CVE-2016-6235/): Denial of service in n/a (medium 5.5)
- [CVE-2016-6234](https://insights.sbomify.com/CVE-2016-6234/): Denial of service in n/a (medium 5.5)
- [CVE-2016-6233](https://insights.sbomify.com/CVE-2016-6233/): Zend Framework Allows SQL Injection (critical 9.8)
- [CVE-2016-6232](https://insights.sbomify.com/CVE-2016-6232/): Path traversal in n/a (high 7.5)
- [CVE-2016-6231](https://insights.sbomify.com/CVE-2016-6231/): Information disclosure in n/a (medium 5.9)
- [CVE-2016-6225](https://insights.sbomify.com/CVE-2016-6225/): Weak cryptography in n/a (medium 5.9)
- [CVE-2016-6224](https://insights.sbomify.com/CVE-2016-6224/): Information disclosure in n/a (low 3.3)
- [CVE-2016-6223](https://insights.sbomify.com/CVE-2016-6223/): Integer overflow in n/a (critical 9.1)
- [CVE-2016-6220](https://insights.sbomify.com/CVE-2016-6220/): Information disclosure in n/a (high 7.5)
- [CVE-2016-6217](https://insights.sbomify.com/CVE-2016-6217/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-6214](https://insights.sbomify.com/CVE-2016-6214/): Denial of service in n/a (medium 6.5)
- [CVE-2016-6213](https://insights.sbomify.com/CVE-2016-6213/): Denial of service in n/a (medium 4.7)
- [CVE-2016-6212](https://insights.sbomify.com/CVE-2016-6212/): Drupal Views can allow unauthorized users to see Statistics information (medium 5.3)
- [CVE-2016-6211](https://insights.sbomify.com/CVE-2016-6211/): Drupal Saving user accounts can sometimes grant the user all roles (high 8.8)
- [CVE-2016-6210](https://insights.sbomify.com/CVE-2016-6210/): Information disclosure in n/a (medium 5.9)
- [CVE-2016-6209](https://insights.sbomify.com/CVE-2016-6209/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-6207](https://insights.sbomify.com/CVE-2016-6207/): Integer overflow in n/a (medium 6.5)
- [CVE-2016-6206](https://insights.sbomify.com/CVE-2016-6206/): Other in n/a (critical 9.8)
- [CVE-2016-6204](https://insights.sbomify.com/CVE-2016-6204/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-6201](https://insights.sbomify.com/CVE-2016-6201/): Cross-site scripting in n/a (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/28/