# Vulnerabilities published in 2016


- [CVE-2016-5446](https://insights.sbomify.com/CVE-2016-5446/): Other in n/a (high 7.3)
- [CVE-2016-5445](https://insights.sbomify.com/CVE-2016-5445/): Other in n/a (high 8.3)
- [CVE-2016-5444](https://insights.sbomify.com/CVE-2016-5444/): Information disclosure in n/a (low 3.7)
- [CVE-2016-5443](https://insights.sbomify.com/CVE-2016-5443/): Denial of service in n/a (medium 4.7)
- [CVE-2016-5442](https://insights.sbomify.com/CVE-2016-5442/): Denial of service in n/a (medium 4.9)
- [CVE-2016-5441](https://insights.sbomify.com/CVE-2016-5441/): Denial of service in n/a (medium 4.9)
- [CVE-2016-5440](https://insights.sbomify.com/CVE-2016-5440/): Denial of service in n/a (medium 4.9)
- [CVE-2016-5439](https://insights.sbomify.com/CVE-2016-5439/): Denial of service in n/a (medium 4.9)
- [CVE-2016-5437](https://insights.sbomify.com/CVE-2016-5437/): Denial of service in n/a (medium 4.9)
- [CVE-2016-5436](https://insights.sbomify.com/CVE-2016-5436/): Denial of service in n/a (medium 4.9)
- [CVE-2016-5435](https://insights.sbomify.com/CVE-2016-5435/): Denial of service in n/a (medium 5.9)
- [CVE-2016-5434](https://insights.sbomify.com/CVE-2016-5434/): Denial of service in n/a (medium 5.5)
- [CVE-2016-5433](https://insights.sbomify.com/CVE-2016-5433/): Security feature bypass in n/a (medium 6.1)
- [CVE-2016-5432](https://insights.sbomify.com/CVE-2016-5432/): Information disclosure in n/a (low 3.3)
- [CVE-2016-5431](https://insights.sbomify.com/CVE-2016-5431/): PHP JOSE Library by Gree Inc. Uses a Broken or Risky Cryptographic Algorithm (high 7.5)
- [CVE-2016-5430](https://insights.sbomify.com/CVE-2016-5430/): The RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1 lacks the Random Filling protection mechanism (medium 5.3)
- [CVE-2016-5429](https://insights.sbomify.com/CVE-2016-5429/): Information disclosure in n/a (low 3.7)
- [CVE-2016-5427](https://insights.sbomify.com/CVE-2016-5427/): Denial of service in n/a (high 7.5)
- [CVE-2016-5426](https://insights.sbomify.com/CVE-2016-5426/): Denial of service in n/a (high 7.5)
- [CVE-2016-5425](https://insights.sbomify.com/CVE-2016-5425/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-5424](https://insights.sbomify.com/CVE-2016-5424/): Code injection in n/a (high 7.1)
- [CVE-2016-5423](https://insights.sbomify.com/CVE-2016-5423/): Null dereference in n/a (high 8.3)
- [CVE-2016-5422](https://insights.sbomify.com/CVE-2016-5422/): Privilege escalation in n/a (high 8.8)
- [CVE-2016-5421](https://insights.sbomify.com/CVE-2016-5421/): Use after free in n/a (high 8.1)
- [CVE-2016-5420](https://insights.sbomify.com/CVE-2016-5420/): Auth bypass in n/a (high 7.5)
- [CVE-2016-5419](https://insights.sbomify.com/CVE-2016-5419/): Security feature bypass in n/a (high 7.5)
- [CVE-2016-5418](https://insights.sbomify.com/CVE-2016-5418/): Path traversal in n/a (high 7.5)
- [CVE-2016-5417](https://insights.sbomify.com/CVE-2016-5417/): Denial of service in n/a (high 7.5)
- [CVE-2016-5416](https://insights.sbomify.com/CVE-2016-5416/): Information disclosure in n/a (high 7.5)
- [CVE-2016-5414](https://insights.sbomify.com/CVE-2016-5414/): Security feature bypass in n/a (high 7.5)
- [CVE-2016-5412](https://insights.sbomify.com/CVE-2016-5412/): Denial of service in n/a (medium 6.5)
- [CVE-2016-5411](https://insights.sbomify.com/CVE-2016-5411/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2016-5410](https://insights.sbomify.com/CVE-2016-5410/): Auth bypass in n/a (medium 5.5)
- [CVE-2016-5409](https://insights.sbomify.com/CVE-2016-5409/): Information disclosure in n/a (high 7.5)
- [CVE-2016-5408](https://insights.sbomify.com/CVE-2016-5408/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-5407](https://insights.sbomify.com/CVE-2016-5407/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-5406](https://insights.sbomify.com/CVE-2016-5406/): Privilege escalation in n/a (high 8.8)
- [CVE-2016-5405](https://insights.sbomify.com/CVE-2016-5405/): Information disclosure in n/a (critical 9.8)
- [CVE-2016-5404](https://insights.sbomify.com/CVE-2016-5404/): Missing authorization in n/a (medium 6.5)
- [CVE-2016-5403](https://insights.sbomify.com/CVE-2016-5403/): Denial of service in n/a (medium 5.5)
- [CVE-2016-5402](https://insights.sbomify.com/CVE-2016-5402/): Code injection in cfme (high 8.8)
- [CVE-2016-5401](https://insights.sbomify.com/CVE-2016-5401/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2016-5400](https://insights.sbomify.com/CVE-2016-5400/): Denial of service in n/a (medium 4.3)
- [CVE-2016-5399](https://insights.sbomify.com/CVE-2016-5399/): Memory corruption in n/a (high 7.8)
- [CVE-2016-5398](https://insights.sbomify.com/CVE-2016-5398/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-5397](https://insights.sbomify.com/CVE-2016-5397/): Apache Thrift Go Library Command Injection (high 8.8)
- [CVE-2016-5396](https://insights.sbomify.com/CVE-2016-5396/): Denial of service in Apache Traffic Server (high 7.5)
- [CVE-2016-5395](https://insights.sbomify.com/CVE-2016-5395/): Apache Ranger allows remote authenticated administrators to inject arbitrary web script or HTML (medium 4.8)
- [CVE-2016-5394](https://insights.sbomify.com/CVE-2016-5394/): Cross site scripting in Apache Sling (medium 6.1)
- [CVE-2016-5393](https://insights.sbomify.com/CVE-2016-5393/): Improper Access Control in Apache Hadoop (high 8.8)
- [CVE-2016-5392](https://insights.sbomify.com/CVE-2016-5392/): Information disclosure in n/a (medium 6.5)
- [CVE-2016-5391](https://insights.sbomify.com/CVE-2016-5391/): Null dereference in n/a (high 7.5)
- [CVE-2016-5390](https://insights.sbomify.com/CVE-2016-5390/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-5388](https://insights.sbomify.com/CVE-2016-5388/): Improper Access Control in Apache Tomcat (high 8.1)
- [CVE-2016-5387](https://insights.sbomify.com/CVE-2016-5387/): Server-side request forgery in n/a (high 8.1)
- [CVE-2016-5386](https://insights.sbomify.com/CVE-2016-5386/): Server-side request forgery in n/a (high 8.1)
- [CVE-2016-5385](https://insights.sbomify.com/CVE-2016-5385/): Server-side request forgery in n/a (high 8.1)
- [CVE-2016-5384](https://insights.sbomify.com/CVE-2016-5384/): Use after free in n/a (high 7.8)
- [CVE-2016-5383](https://insights.sbomify.com/CVE-2016-5383/): Code injection in n/a (high 8.8)
- [CVE-2016-5374](https://insights.sbomify.com/CVE-2016-5374/): Missing authorization in n/a (high 8.8)
- [CVE-2016-5372](https://insights.sbomify.com/CVE-2016-5372/): Cross-site request forgery in n/a (medium 6.3)
- [CVE-2016-5368](https://insights.sbomify.com/CVE-2016-5368/): Denial of service in n/a (high 7.5)
- [CVE-2016-5367](https://insights.sbomify.com/CVE-2016-5367/): Information disclosure in n/a (high 7.5)
- [CVE-2016-5366](https://insights.sbomify.com/CVE-2016-5366/): File upload in n/a (high 7.5)
- [CVE-2016-5365](https://insights.sbomify.com/CVE-2016-5365/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-5364](https://insights.sbomify.com/CVE-2016-5364/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-5363](https://insights.sbomify.com/CVE-2016-5363/): OpenStack Neutron Intended MAC-spoofing protection mechanism bypass (high 8.2)
- [CVE-2016-5362](https://insights.sbomify.com/CVE-2016-5362/): OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism (high 8.2)
- [CVE-2016-5361](https://insights.sbomify.com/CVE-2016-5361/): Denial of service in n/a (high 7.5)
- [CVE-2016-5360](https://insights.sbomify.com/CVE-2016-5360/): Memory corruption in n/a (high 7.5)
- [CVE-2016-5359](https://insights.sbomify.com/CVE-2016-5359/): Integer overflow in n/a (medium 5.9)
- [CVE-2016-5358](https://insights.sbomify.com/CVE-2016-5358/): Denial of service in n/a (medium 5.9)
- [CVE-2016-5357](https://insights.sbomify.com/CVE-2016-5357/): Integer overflow in n/a (medium 5.9)
- [CVE-2016-5356](https://insights.sbomify.com/CVE-2016-5356/): Integer overflow in n/a (medium 5.9)
- [CVE-2016-5355](https://insights.sbomify.com/CVE-2016-5355/): Integer overflow in n/a (medium 5.9)
- [CVE-2016-5354](https://insights.sbomify.com/CVE-2016-5354/): Null dereference in n/a (medium 5.9)
- [CVE-2016-5353](https://insights.sbomify.com/CVE-2016-5353/): Denial of service in n/a (medium 5.9)
- [CVE-2016-5352](https://insights.sbomify.com/CVE-2016-5352/): epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles certain length values, which allows remote attac (medium 5.9)
- [CVE-2016-5351](https://insights.sbomify.com/CVE-2016-5351/): epan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles the lack of an EAPOL_R (medium 5.9)
- [CVE-2016-5350](https://insights.sbomify.com/CVE-2016-5350/): Denial of service in n/a (high 7.5)
- [CVE-2016-5349](https://insights.sbomify.com/CVE-2016-5349/): Privilege escalation in Qualcomm Snapdragon 800, 600, 400, 200 (medium 5.5)
- [CVE-2016-5348](https://insights.sbomify.com/CVE-2016-5348/): Denial of service in n/a (medium 5.9)
- [CVE-2016-5347](https://insights.sbomify.com/CVE-2016-5347/): Information disclosure in All Qualcomm products (medium 4.7)
- [CVE-2016-5346](https://insights.sbomify.com/CVE-2016-5346/): Null dereference in n/a (medium 5.5)
- [CVE-2016-5345](https://insights.sbomify.com/CVE-2016-5345/): Memory corruption in n/a (high 7.0)
- [CVE-2016-5344](https://insights.sbomify.com/CVE-2016-5344/): Integer overflow in n/a (critical 9.8)
- [CVE-2016-5343](https://insights.sbomify.com/CVE-2016-5343/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-5342](https://insights.sbomify.com/CVE-2016-5342/): Memory corruption in n/a (high 7.8)
- [CVE-2016-5341](https://insights.sbomify.com/CVE-2016-5341/): Denial of service in n/a (medium 5.9)
- [CVE-2016-5340](https://insights.sbomify.com/CVE-2016-5340/): Auth bypass in n/a (high 7.8)
- [CVE-2016-5338](https://insights.sbomify.com/CVE-2016-5338/): Memory corruption in n/a (high 7.8)
- [CVE-2016-5337](https://insights.sbomify.com/CVE-2016-5337/): Information disclosure in n/a (medium 5.5)
- [CVE-2016-5336](https://insights.sbomify.com/CVE-2016-5336/): VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors. (critical 9.8)
- [CVE-2016-5335](https://insights.sbomify.com/CVE-2016-5335/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-5334](https://insights.sbomify.com/CVE-2016-5334/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-5333](https://insights.sbomify.com/CVE-2016-5333/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2016-5332](https://insights.sbomify.com/CVE-2016-5332/): Path traversal in n/a (medium 5.3)
- [CVE-2016-5331](https://insights.sbomify.com/CVE-2016-5331/): Other in n/a (medium 6.1)
- [CVE-2016-5330](https://insights.sbomify.com/CVE-2016-5330/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-5329](https://insights.sbomify.com/CVE-2016-5329/): Information disclosure in n/a (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/35/