# Vulnerabilities published in 2016


- [CVE-2016-5919](https://insights.sbomify.com/CVE-2016-5919/): Weak cryptography in Access Manager (high 7.5)
- [CVE-2016-5918](https://insights.sbomify.com/CVE-2016-5918/): Information disclosure in Tivoli Storage Manager HSM for Windows (medium 4.7)
- [CVE-2016-5905](https://insights.sbomify.com/CVE-2016-5905/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-5902](https://insights.sbomify.com/CVE-2016-5902/): Cross-site scripting in IBM Maximo Asset Management 6.2, 7.1, 7.5, 7.5.0.0, 7.5.0.10, 7.1.0.0, 6.2.0.0, 7.2, 7.1.1, 7.1.2, 7.2.1, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 7.1.1.1, 7.1.1.10, 7.1.1.11, 7.1.1.12, 7.1.1.2, 7.1.1.5, 7.1.1.6, 7.1.1.7, 7.1.1.8, 7.1.1.9, 7.5.0.1, 7.5.0.2, 7.5.0.3, 7.5.0.4, 7.5.0.5, 7.6, 7.5.0, 7.6.0 (medium 6.1)
- [CVE-2016-5901](https://insights.sbomify.com/CVE-2016-5901/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-5900](https://insights.sbomify.com/CVE-2016-5900/): Information disclosure in Tealeaf Customer Experience (medium 5.9)
- [CVE-2016-5899](https://insights.sbomify.com/CVE-2016-5899/): Cross-site scripting in Jazz Reporting Service (medium 5.4)
- [CVE-2016-5898](https://insights.sbomify.com/CVE-2016-5898/): Information disclosure in Jazz Reporting Service (medium 4.3)
- [CVE-2016-5897](https://insights.sbomify.com/CVE-2016-5897/): Cross-site scripting in Jazz Reporting Service (medium 5.4)
- [CVE-2016-5896](https://insights.sbomify.com/CVE-2016-5896/): Information disclosure in Maximo Asset Management (medium 5.3)
- [CVE-2016-5894](https://insights.sbomify.com/CVE-2016-5894/): Information disclosure in WebSphere Commerce Enterprise (medium 5.1)
- [CVE-2016-5893](https://insights.sbomify.com/CVE-2016-5893/): Information disclosure in Sterling B2B Integrator (medium 5.5)
- [CVE-2016-5892](https://insights.sbomify.com/CVE-2016-5892/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-5890](https://insights.sbomify.com/CVE-2016-5890/): Missing authorization in n/a (medium 5.3)
- [CVE-2016-5889](https://insights.sbomify.com/CVE-2016-5889/): Cross-site request forgery in Interact (high 8.8)
- [CVE-2016-5888](https://insights.sbomify.com/CVE-2016-5888/): Cross-site scripting in Interact (medium 5.4)
- [CVE-2016-5884](https://insights.sbomify.com/CVE-2016-5884/): Cross-site scripting in IBM Domino 8.5.3.5, 8.5.3.6, 9.0.1, 8.5, 9.0, 8.5.1, 8.5.2, 8.5.3, 9.0.1.1, 8.0.2, 8.0, 8.0.1, 8.5.1.5, 8.5.2.4, 9.0.1.2, 8.5.0.1, 9.0.1.3, 8.5.1.4, 9.0.1.4, 9.0.1.5, 8.5.1.1, 9.0.1.6, 9.0.1.7 (medium 6.1)
- [CVE-2016-5883](https://insights.sbomify.com/CVE-2016-5883/): Cross-site scripting in iNotes (medium 6.1)
- [CVE-2016-5882](https://insights.sbomify.com/CVE-2016-5882/): Cross-site scripting in Domino (medium 6.1)
- [CVE-2016-5881](https://insights.sbomify.com/CVE-2016-5881/): Cross-site scripting in iNotes (medium 6.1)
- [CVE-2016-5880](https://insights.sbomify.com/CVE-2016-5880/): Cross-site scripting in Domino (medium 5.4)
- [CVE-2016-5879](https://insights.sbomify.com/CVE-2016-5879/): Command injection in n/a (high 8.8)
- [CVE-2016-5878](https://insights.sbomify.com/CVE-2016-5878/): Open redirect in n/a (medium 6.8)
- [CVE-2016-5876](https://insights.sbomify.com/CVE-2016-5876/): Missing authorization in n/a (medium 5.9)
- [CVE-2016-5874](https://insights.sbomify.com/CVE-2016-5874/): Denial of service in n/a (high 7.5)
- [CVE-2016-5873](https://insights.sbomify.com/CVE-2016-5873/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-5872](https://insights.sbomify.com/CVE-2016-5872/): Other in All Qualcomm products (critical 9.8)
- [CVE-2016-5871](https://insights.sbomify.com/CVE-2016-5871/): Integer overflow in All Qualcomm products (critical 9.8)
- [CVE-2016-5870](https://insights.sbomify.com/CVE-2016-5870/): Null dereference in n/a (high 7.8)
- [CVE-2016-5868](https://insights.sbomify.com/CVE-2016-5868/): Privilege escalation in n/a (high 7.0)
- [CVE-2016-5867](https://insights.sbomify.com/CVE-2016-5867/): Denial of service in All Qualcomm products (high 7.0)
- [CVE-2016-5864](https://insights.sbomify.com/CVE-2016-5864/): Integer overflow in All Qualcomm products (high 7.8)
- [CVE-2016-5863](https://insights.sbomify.com/CVE-2016-5863/): Memory corruption in All Qualcomm products (high 7.8)
- [CVE-2016-5862](https://insights.sbomify.com/CVE-2016-5862/): Null dereference in All Qualcomm products (high 7.0)
- [CVE-2016-5861](https://insights.sbomify.com/CVE-2016-5861/): Memory corruption in All Qualcomm products (high 8.8)
- [CVE-2016-5860](https://insights.sbomify.com/CVE-2016-5860/): Integer overflow in All Qualcomm products (high 7.0)
- [CVE-2016-5859](https://insights.sbomify.com/CVE-2016-5859/): Integer overflow in All Qualcomm products (high 7.0)
- [CVE-2016-5858](https://insights.sbomify.com/CVE-2016-5858/): Information disclosure in All Qualcomm products (medium 4.7)
- [CVE-2016-5857](https://insights.sbomify.com/CVE-2016-5857/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-5856](https://insights.sbomify.com/CVE-2016-5856/): Privilege escalation in n/a (high 7.0)
- [CVE-2016-5855](https://insights.sbomify.com/CVE-2016-5855/): Information disclosure in All Qualcomm products (medium 4.7)
- [CVE-2016-5854](https://insights.sbomify.com/CVE-2016-5854/): Information disclosure in All Qualcomm products (medium 4.7)
- [CVE-2016-5853](https://insights.sbomify.com/CVE-2016-5853/): Missing authorization in All Qualcomm products (high 7.0)
- [CVE-2016-5852](https://insights.sbomify.com/CVE-2016-5852/): Privilege escalation in Quadro, NVS, GeForce (all versions) (high 7.8)
- [CVE-2016-5851](https://insights.sbomify.com/CVE-2016-5851/): Improper Restriction of XML External Entity Reference in python-docx (high 8.8)
- [CVE-2016-5850](https://insights.sbomify.com/CVE-2016-5850/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-5849](https://insights.sbomify.com/CVE-2016-5849/): Information disclosure in n/a (low 2.5)
- [CVE-2016-5848](https://insights.sbomify.com/CVE-2016-5848/): Information disclosure in n/a (medium 6.7)
- [CVE-2016-5847](https://insights.sbomify.com/CVE-2016-5847/): Privilege escalation in n/a (medium 5.8)
- [CVE-2016-5845](https://insights.sbomify.com/CVE-2016-5845/): Denial of service in n/a (medium 5.5)
- [CVE-2016-5844](https://insights.sbomify.com/CVE-2016-5844/): Integer overflow in n/a (medium 6.5)
- [CVE-2016-5843](https://insights.sbomify.com/CVE-2016-5843/): SQL injection in n/a (critical 9.4)
- [CVE-2016-5842](https://insights.sbomify.com/CVE-2016-5842/): Information disclosure in n/a (high 7.5)
- [CVE-2016-5841](https://insights.sbomify.com/CVE-2016-5841/): Integer overflow in n/a (critical 9.8)
- [CVE-2016-5840](https://insights.sbomify.com/CVE-2016-5840/): Command injection in n/a (high 7.2)
- [CVE-2016-5839](https://insights.sbomify.com/CVE-2016-5839/): Security feature bypass in n/a (high 7.5)
- [CVE-2016-5838](https://insights.sbomify.com/CVE-2016-5838/): Auth bypass in n/a (high 7.5)
- [CVE-2016-5837](https://insights.sbomify.com/CVE-2016-5837/): Missing authorization in n/a (high 7.5)
- [CVE-2016-5836](https://insights.sbomify.com/CVE-2016-5836/): Denial of service in n/a (high 7.5)
- [CVE-2016-5835](https://insights.sbomify.com/CVE-2016-5835/): Information disclosure in n/a (high 7.5)
- [CVE-2016-5834](https://insights.sbomify.com/CVE-2016-5834/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-5833](https://insights.sbomify.com/CVE-2016-5833/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-5832](https://insights.sbomify.com/CVE-2016-5832/): Open redirect in n/a (high 7.5)
- [CVE-2016-5829](https://insights.sbomify.com/CVE-2016-5829/): Memory corruption in n/a (high 7.8)
- [CVE-2016-5828](https://insights.sbomify.com/CVE-2016-5828/): Denial of service in n/a (high 7.8)
- [CVE-2016-5827](https://insights.sbomify.com/CVE-2016-5827/): Memory corruption in n/a (high 7.5)
- [CVE-2016-5826](https://insights.sbomify.com/CVE-2016-5826/): Memory corruption in n/a (high 7.5)
- [CVE-2016-5825](https://insights.sbomify.com/CVE-2016-5825/): Memory corruption in n/a (medium 5.5)
- [CVE-2016-5824](https://insights.sbomify.com/CVE-2016-5824/): Use after free in n/a (medium 5.5)
- [CVE-2016-5823](https://insights.sbomify.com/CVE-2016-5823/): Use after free in n/a (medium 5.5)
- [CVE-2016-5822](https://insights.sbomify.com/CVE-2016-5822/): Denial of service in n/a (high 7.5)
- [CVE-2016-5821](https://insights.sbomify.com/CVE-2016-5821/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-5819](https://insights.sbomify.com/CVE-2016-5819/): Cross-site scripting in OnCell G3100V2 Series (medium 6.1)
- [CVE-2016-5818](https://insights.sbomify.com/CVE-2016-5818/): Hardcoded credentials in Schneider Electric PowerLogic 2.651 and older (critical 9.8)
- [CVE-2016-5817](https://insights.sbomify.com/CVE-2016-5817/): SQL injection in n/a (critical 9.8)
- [CVE-2016-5816](https://insights.sbomify.com/CVE-2016-5816/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2016-5815](https://insights.sbomify.com/CVE-2016-5815/): Missing authorization in Schneider Electric IONXXXX Series Power Meter Vulnerabilities (critical 9.8)
- [CVE-2016-5814](https://insights.sbomify.com/CVE-2016-5814/): Memory corruption in n/a (high 8.6)
- [CVE-2016-5813](https://insights.sbomify.com/CVE-2016-5813/): Information disclosure in Visonic PowerLink2 (medium 5.3)
- [CVE-2016-5812](https://insights.sbomify.com/CVE-2016-5812/): Information disclosure in n/a (low 3.3)
- [CVE-2016-5811](https://insights.sbomify.com/CVE-2016-5811/): Cross-site scripting in Visonic PowerLink2 (medium 6.1)
- [CVE-2016-5810](https://insights.sbomify.com/CVE-2016-5810/): Information disclosure in n/a (medium 4.9)
- [CVE-2016-5809](https://insights.sbomify.com/CVE-2016-5809/): Cross-site request forgery in Schneider Electric IONXXXX Series (high 8.8)
- [CVE-2016-5807](https://insights.sbomify.com/CVE-2016-5807/): Missing authorization in n/a (high 8.1)
- [CVE-2016-5805](https://insights.sbomify.com/CVE-2016-5805/): Memory corruption in Delta Electronics WPLSoft, ISPSoft, and PMSoft (high 7.8)
- [CVE-2016-5804](https://insights.sbomify.com/CVE-2016-5804/): Weak cryptography in n/a (critical 9.8)
- [CVE-2016-5803](https://insights.sbomify.com/CVE-2016-5803/): Path traversal in CA Unified Infrastructure Management 8.47 and earlier (high 8.6)
- [CVE-2016-5802](https://insights.sbomify.com/CVE-2016-5802/): Memory corruption in Delta Electronics WPLSoft, ISPSoft, and PMSoft (high 7.8)
- [CVE-2016-5801](https://insights.sbomify.com/CVE-2016-5801/): Auth bypass in OmniMetrix OmniView 1.2 (high 7.5)
- [CVE-2016-5800](https://insights.sbomify.com/CVE-2016-5800/): Memory corruption in Automation FV Designer (high 7.5)
- [CVE-2016-5799](https://insights.sbomify.com/CVE-2016-5799/): Auth bypass in n/a (critical 9.8)
- [CVE-2016-5798](https://insights.sbomify.com/CVE-2016-5798/): Memory corruption in Fatek Automation Designer 2.1.2.2 (high 7.5)
- [CVE-2016-5797](https://insights.sbomify.com/CVE-2016-5797/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-5796](https://insights.sbomify.com/CVE-2016-5796/): Memory corruption in Fatek Automation Designer 2.1.2.2 (high 8.8)
- [CVE-2016-5795](https://insights.sbomify.com/CVE-2016-5795/): XML external entity in n/a (high 7.3)
- [CVE-2016-5793](https://insights.sbomify.com/CVE-2016-5793/): Privilege escalation in n/a (high 8.8)
- [CVE-2016-5792](https://insights.sbomify.com/CVE-2016-5792/): SQL injection in n/a (critical 9.8)
- [CVE-2016-5791](https://insights.sbomify.com/CVE-2016-5791/): Auth bypass in n/a (critical 9.8)
- [CVE-2016-5790](https://insights.sbomify.com/CVE-2016-5790/): Auth bypass in n/a (high 7.5)
- [CVE-2016-5789](https://insights.sbomify.com/CVE-2016-5789/): Cross-site request forgery in n/a (high 8.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/31/