# Vulnerabilities published in 2016 - [CVE-2016-5788](https://insights.sbomify.com/CVE-2016-5788/): Auth bypass in n/a (critical 10.0) - [CVE-2016-5787](https://insights.sbomify.com/CVE-2016-5787/): Privilege escalation in n/a (medium 6.3) - [CVE-2016-5786](https://insights.sbomify.com/CVE-2016-5786/): Information disclosure in OmniMetrix OmniView 1.2 (high 7.5) - [CVE-2016-5782](https://insights.sbomify.com/CVE-2016-5782/): Other in Locus Energy LGate through 320 (high 8.6) - [CVE-2016-5781](https://insights.sbomify.com/CVE-2016-5781/): Memory corruption in n/a (high 7.8) - [CVE-2016-5774](https://insights.sbomify.com/CVE-2016-5774/): Weak cryptography in n/a (high 8.1) - [CVE-2016-5773](https://insights.sbomify.com/CVE-2016-5773/): Use after free in n/a (critical 9.8) - [CVE-2016-5772](https://insights.sbomify.com/CVE-2016-5772/): Use after free in n/a (critical 9.8) - [CVE-2016-5771](https://insights.sbomify.com/CVE-2016-5771/): Use after free in n/a (critical 9.8) - [CVE-2016-5770](https://insights.sbomify.com/CVE-2016-5770/): Integer overflow in n/a (critical 9.8) - [CVE-2016-5769](https://insights.sbomify.com/CVE-2016-5769/): Integer overflow in n/a (critical 9.8) - [CVE-2016-5768](https://insights.sbomify.com/CVE-2016-5768/): Use after free in n/a (critical 9.8) - [CVE-2016-5767](https://insights.sbomify.com/CVE-2016-5767/): Integer overflow in n/a (high 8.8) - [CVE-2016-5766](https://insights.sbomify.com/CVE-2016-5766/): Integer overflow in n/a (high 8.8) - [CVE-2016-5765](https://insights.sbomify.com/CVE-2016-5765/): Path traversal in Micro Focus MSS, RWeb, ZFE, RSG 1.x, 2.x, 12.x (medium 6.5) - [CVE-2016-5764](https://insights.sbomify.com/CVE-2016-5764/): Memory corruption in Micro Focus Rumba FTP 4.X before 4.5 (HF 14668) (high 8.8) - [CVE-2016-5763](https://insights.sbomify.com/CVE-2016-5763/): Missing authorization in Novell Open Enterprise Server 11 and 2015 (critical 9.1) - [CVE-2016-5762](https://insights.sbomify.com/CVE-2016-5762/): Integer overflow in n/a (critical 9.8) - [CVE-2016-5761](https://insights.sbomify.com/CVE-2016-5761/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-5760](https://insights.sbomify.com/CVE-2016-5760/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-5759](https://insights.sbomify.com/CVE-2016-5759/): Path traversal in n/a (high 7.8) - [CVE-2016-5758](https://insights.sbomify.com/CVE-2016-5758/): Cross-site request forgery in NetIQ Access Manager (high 8.8) - [CVE-2016-5757](https://insights.sbomify.com/CVE-2016-5757/): Information disclosure in NetIQ Access Manager (critical 9.8) - [CVE-2016-5756](https://insights.sbomify.com/CVE-2016-5756/): Cross-site scripting in NetIQ Access Manager (medium 6.1) - [CVE-2016-5755](https://insights.sbomify.com/CVE-2016-5755/): Other in NetIQ Access Manager (medium 6.5) - [CVE-2016-5754](https://insights.sbomify.com/CVE-2016-5754/): Information disclosure in NetIQ Access Manager (high 7.5) - [CVE-2016-5752](https://insights.sbomify.com/CVE-2016-5752/): Information disclosure in NetIQ Access Manager (high 7.5) - [CVE-2016-5751](https://insights.sbomify.com/CVE-2016-5751/): Cross-site scripting in NetIQ Access Manager (medium 6.1) - [CVE-2016-5750](https://insights.sbomify.com/CVE-2016-5750/): File upload in NetIQ iManager (high 8.8) - [CVE-2016-5749](https://insights.sbomify.com/CVE-2016-5749/): XML external entity in NetIQ Access Manager (medium 5.5) - [CVE-2016-5748](https://insights.sbomify.com/CVE-2016-5748/): XML external entity in NetIQ Access Manager (medium 5.5) - [CVE-2016-5747](https://insights.sbomify.com/CVE-2016-5747/): Auth bypass in Novell eDirectory (high 7.5) - [CVE-2016-5746](https://insights.sbomify.com/CVE-2016-5746/): Information disclosure in n/a (medium 5.1) - [CVE-2016-5745](https://insights.sbomify.com/CVE-2016-5745/): Missing authorization in n/a (critical 9.8) - [CVE-2016-5744](https://insights.sbomify.com/CVE-2016-5744/): Information disclosure in n/a (high 7.5) - [CVE-2016-5743](https://insights.sbomify.com/CVE-2016-5743/): Code injection in n/a (critical 9.8) - [CVE-2016-5742](https://insights.sbomify.com/CVE-2016-5742/): SQL injection in n/a (critical 9.8) - [CVE-2016-5740](https://insights.sbomify.com/CVE-2016-5740/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-5739](https://insights.sbomify.com/CVE-2016-5739/): phpMyAdmin vulnerable to Cross-Site Request Forgery (high 7.5) - [CVE-2016-5737](https://insights.sbomify.com/CVE-2016-5737/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-5736](https://insights.sbomify.com/CVE-2016-5736/): Misconfiguration in n/a (high 7.5) - [CVE-2016-5735](https://insights.sbomify.com/CVE-2016-5735/): Integer overflow in n/a (high 7.8) - [CVE-2016-5734](https://insights.sbomify.com/CVE-2016-5734/): phpMyAdmin Code Injection vulnerability (critical 9.8) - [CVE-2016-5733](https://insights.sbomify.com/CVE-2016-5733/): phpMyAdmin vulnerable to Cross-site Scripting (medium 6.1) - [CVE-2016-5732](https://insights.sbomify.com/CVE-2016-5732/): phpMyAdmin XSS Vulnerability (medium 6.1) - [CVE-2016-5731](https://insights.sbomify.com/CVE-2016-5731/): phpMyAdmin Cross-site scripting (XSS) vulnerability (medium 6.1) - [CVE-2016-5730](https://insights.sbomify.com/CVE-2016-5730/): phpMyAdmin full path disclosure vulnerability (medium 5.3) - [CVE-2016-5729](https://insights.sbomify.com/CVE-2016-5729/): Privilege escalation in n/a (high 8.2) - [CVE-2016-5728](https://insights.sbomify.com/CVE-2016-5728/): Race condition in n/a (medium 6.3) - [CVE-2016-5727](https://insights.sbomify.com/CVE-2016-5727/): Code injection in n/a (high 8.8) - [CVE-2016-5726](https://insights.sbomify.com/CVE-2016-5726/): Code injection in n/a (critical 9.8) - [CVE-2016-5725](https://insights.sbomify.com/CVE-2016-5725/): Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch (medium 5.9) - [CVE-2016-5724](https://insights.sbomify.com/CVE-2016-5724/): Information disclosure in n/a (high 7.5) - [CVE-2016-5723](https://insights.sbomify.com/CVE-2016-5723/): Privilege escalation in n/a (high 7.8) - [CVE-2016-5722](https://insights.sbomify.com/CVE-2016-5722/): Information disclosure in n/a (high 7.3) - [CVE-2016-5721](https://insights.sbomify.com/CVE-2016-5721/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-5720](https://insights.sbomify.com/CVE-2016-5720/): Path traversal in n/a (high 7.8) - [CVE-2016-5716](https://insights.sbomify.com/CVE-2016-5716/): Code injection in Puppet Enterprise (high 8.8) - [CVE-2016-5715](https://insights.sbomify.com/CVE-2016-5715/): Open redirect in n/a (medium 6.1) - [CVE-2016-5714](https://insights.sbomify.com/CVE-2016-5714/): Security feature bypass in n/a (high 7.2) - [CVE-2016-5713](https://insights.sbomify.com/CVE-2016-5713/): Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs. (critical 9.8) - [CVE-2016-5711](https://insights.sbomify.com/CVE-2016-5711/): Weak cryptography in n/a (critical 9.8) - [CVE-2016-5710](https://insights.sbomify.com/CVE-2016-5710/): Cross-site request forgery in n/a (medium 4.6) - [CVE-2016-5709](https://insights.sbomify.com/CVE-2016-5709/): Weak cryptography in n/a (medium 4.7) - [CVE-2016-5706](https://insights.sbomify.com/CVE-2016-5706/): phpMyAdmin Denial Of Service (DOS) attack (high 7.5) - [CVE-2016-5705](https://insights.sbomify.com/CVE-2016-5705/): phpMyAdmin vulnerable to Cross-site Scripting (medium 6.1) - [CVE-2016-5704](https://insights.sbomify.com/CVE-2016-5704/): phpMyAdmin XSS Vulnerability (medium 6.1) - [CVE-2016-5703](https://insights.sbomify.com/CVE-2016-5703/): SQL injection in n/a (critical 9.8) - [CVE-2016-5702](https://insights.sbomify.com/CVE-2016-5702/): phpMyAdmin cookie-attribute injection (low 3.7) - [CVE-2016-5701](https://insights.sbomify.com/CVE-2016-5701/): phpMyAdmin vulnerable to Cross-site Scripting (medium 6.1) - [CVE-2016-5700](https://insights.sbomify.com/CVE-2016-5700/): Other in n/a (critical 9.8) - [CVE-2016-5699](https://insights.sbomify.com/CVE-2016-5699/): Other in n/a (medium 6.1) - [CVE-2016-5697](https://insights.sbomify.com/CVE-2016-5697/): Ruby-saml allows attackers to perform XML signature wrapping attacks (high 7.5) - [CVE-2016-5696](https://insights.sbomify.com/CVE-2016-5696/): Information disclosure in n/a (medium 4.8) - [CVE-2016-5691](https://insights.sbomify.com/CVE-2016-5691/): Other in n/a (critical 9.8) - [CVE-2016-5690](https://insights.sbomify.com/CVE-2016-5690/): Null dereference in n/a (critical 9.8) - [CVE-2016-5689](https://insights.sbomify.com/CVE-2016-5689/): Null dereference in n/a (critical 9.8) - [CVE-2016-5688](https://insights.sbomify.com/CVE-2016-5688/): Memory corruption in n/a (high 8.1) - [CVE-2016-5687](https://insights.sbomify.com/CVE-2016-5687/): Memory corruption in n/a (critical 9.8) - [CVE-2016-5686](https://insights.sbomify.com/CVE-2016-5686/): Auth bypass in n/a (critical 9.8) - [CVE-2016-5685](https://insights.sbomify.com/CVE-2016-5685/): Command injection in iDRAC7 and iDRAC8 (high 8.8) - [CVE-2016-5684](https://insights.sbomify.com/CVE-2016-5684/): Memory corruption in FreeImage (high 7.8) - [CVE-2016-5683](https://insights.sbomify.com/CVE-2016-5683/): Hardcoded credentials in n/a (high 7.8) - [CVE-2016-5682](https://insights.sbomify.com/CVE-2016-5682/): Cross-Site Scripting in swagger-ui (medium 6.1) - [CVE-2016-5681](https://insights.sbomify.com/CVE-2016-5681/): Memory corruption in n/a (critical 9.8) - [CVE-2016-5680](https://insights.sbomify.com/CVE-2016-5680/): Memory corruption in n/a (high 8.8) - [CVE-2016-5679](https://insights.sbomify.com/CVE-2016-5679/): Command injection in n/a (high 8.8) - [CVE-2016-5678](https://insights.sbomify.com/CVE-2016-5678/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2016-5677](https://insights.sbomify.com/CVE-2016-5677/): Hardcoded credentials in n/a (high 7.5) - [CVE-2016-5676](https://insights.sbomify.com/CVE-2016-5676/): Missing authorization in n/a (high 7.5) - [CVE-2016-5675](https://insights.sbomify.com/CVE-2016-5675/): Code injection in n/a (critical 9.8) - [CVE-2016-5674](https://insights.sbomify.com/CVE-2016-5674/): Code injection in n/a (critical 9.8) - [CVE-2016-5673](https://insights.sbomify.com/CVE-2016-5673/): Server-side request forgery in n/a (high 7.5) - [CVE-2016-5672](https://insights.sbomify.com/CVE-2016-5672/): Security feature bypass in n/a (high 8.1) - [CVE-2016-5671](https://insights.sbomify.com/CVE-2016-5671/): Cross-site request forgery in n/a (high 8.8) - [CVE-2016-5670](https://insights.sbomify.com/CVE-2016-5670/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2016-5669](https://insights.sbomify.com/CVE-2016-5669/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2016-5668](https://insights.sbomify.com/CVE-2016-5668/): Auth bypass in n/a (critical 9.8) - [CVE-2016-5667](https://insights.sbomify.com/CVE-2016-5667/): Auth bypass in n/a (critical 9.8) - [CVE-2016-5666](https://insights.sbomify.com/CVE-2016-5666/): Auth bypass in n/a (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2016/page/32/