# Vulnerabilities published in 2016


- [CVE-2016-5114](https://insights.sbomify.com/CVE-2016-5114/): Memory corruption in php:php (critical 9.1)
- [CVE-2016-5109](https://insights.sbomify.com/CVE-2016-5109/): Auth bypass in citrix:worx home (medium 4.3)
- [CVE-2016-5108](https://insights.sbomify.com/CVE-2016-5108/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2016-5107](https://insights.sbomify.com/CVE-2016-5107/): Memory corruption in canonical:ubuntu linux (medium 6.0)
- [CVE-2016-5106](https://insights.sbomify.com/CVE-2016-5106/): Memory corruption in canonical:ubuntu linux (medium 6.0)
- [CVE-2016-5105](https://insights.sbomify.com/CVE-2016-5105/): Information disclosure in canonical:ubuntu linux (medium 4.4)
- [CVE-2016-5104](https://insights.sbomify.com/CVE-2016-5104/): Security feature bypass in canonical:ubuntu linux (medium 5.3)
- [CVE-2016-5102](https://insights.sbomify.com/CVE-2016-5102/): Memory corruption in libtiff:libtiff (medium 5.5)
- [CVE-2016-5101](https://insights.sbomify.com/CVE-2016-5101/): Other in opera:opera mail (high 8.8)
- [CVE-2016-5100](https://insights.sbomify.com/CVE-2016-5100/): Froxlor guessable password reset token (critical 9.8)
- [CVE-2016-5099](https://insights.sbomify.com/CVE-2016-5099/): Cross-site scripting in opensuse:opensuse (medium 6.1)
- [CVE-2016-5098](https://insights.sbomify.com/CVE-2016-5098/): Path traversal in opensuse:opensuse (medium 5.3)
- [CVE-2016-5097](https://insights.sbomify.com/CVE-2016-5097/): Information disclosure in opensuse:opensuse (medium 5.3)
- [CVE-2016-5096](https://insights.sbomify.com/CVE-2016-5096/): Integer overflow in php:php (high 8.6)
- [CVE-2016-5095](https://insights.sbomify.com/CVE-2016-5095/): Integer overflow in php:php (high 8.6)
- [CVE-2016-5094](https://insights.sbomify.com/CVE-2016-5094/): Integer overflow in php:php (high 8.6)
- [CVE-2016-5093](https://insights.sbomify.com/CVE-2016-5093/): Memory corruption in php:php (high 8.6)
- [CVE-2016-5092](https://insights.sbomify.com/CVE-2016-5092/): Path traversal in fortinet:fortiweb (medium 4.9)
- [CVE-2016-5091](https://insights.sbomify.com/CVE-2016-5091/): Extbase for TYPO3 allows RCE (high 8.1)
- [CVE-2016-5087](https://insights.sbomify.com/CVE-2016-5087/): Misconfiguration in alertus:alertus desktop notification for os x (medium 4.4)
- [CVE-2016-5086](https://insights.sbomify.com/CVE-2016-5086/): Auth bypass in animas:onetouch ping firmware (critical 9.8)
- [CVE-2016-5085](https://insights.sbomify.com/CVE-2016-5085/): Weak cryptography in animas:onetouch ping firmware (high 7.5)
- [CVE-2016-5084](https://insights.sbomify.com/CVE-2016-5084/): Weak cryptography in animas:onetouch ping firmware (high 7.5)
- [CVE-2016-5081](https://insights.sbomify.com/CVE-2016-5081/): Hardcoded credentials in zmodo:zp-ibh-13w (critical 9.8)
- [CVE-2016-5080](https://insights.sbomify.com/CVE-2016-5080/): Integer overflow in objective systems:asn1c (critical 9.8)
- [CVE-2016-5078](https://insights.sbomify.com/CVE-2016-5078/): Cross-site scripting in Paessler PRTG before 16.2.24.4045 (medium 6.1)
- [CVE-2016-5077](https://insights.sbomify.com/CVE-2016-5077/): Cross-site scripting in Netikus EventSentry before 3.2.1.44 (medium 6.1)
- [CVE-2016-5076](https://insights.sbomify.com/CVE-2016-5076/): Information disclosure in CloudView NMS before 2.10a (high 7.5)
- [CVE-2016-5075](https://insights.sbomify.com/CVE-2016-5075/): Cross-site scripting in CloudView NMS before 2.10a (medium 6.1)
- [CVE-2016-5074](https://insights.sbomify.com/CVE-2016-5074/): Memory corruption in CloudView NMS before 2.10a (critical 9.8)
- [CVE-2016-5073](https://insights.sbomify.com/CVE-2016-5073/): Cross-site scripting in CloudView NMS before 2.10a (medium 6.1)
- [CVE-2016-5072](https://insights.sbomify.com/CVE-2016-5072/): Code injection in OXID eShop before 2016-06-13 (high 8.8)
- [CVE-2016-5071](https://insights.sbomify.com/CVE-2016-5071/): Privilege escalation in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 (high 8.8)
- [CVE-2016-5070](https://insights.sbomify.com/CVE-2016-5070/): Information disclosure in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 (critical 9.8)
- [CVE-2016-5069](https://insights.sbomify.com/CVE-2016-5069/): Auth bypass in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 (critical 9.8)
- [CVE-2016-5068](https://insights.sbomify.com/CVE-2016-5068/): Auth bypass in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 (critical 9.8)
- [CVE-2016-5067](https://insights.sbomify.com/CVE-2016-5067/): Command injection in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 (high 8.8)
- [CVE-2016-5066](https://insights.sbomify.com/CVE-2016-5066/): Hardcoded credentials in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 (critical 9.8)
- [CVE-2016-5065](https://insights.sbomify.com/CVE-2016-5065/): Command injection in Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 (critical 9.8)
- [CVE-2016-5063](https://insights.sbomify.com/CVE-2016-5063/): Missing authorization in bmc:server automation (medium 5.3)
- [CVE-2016-5062](https://insights.sbomify.com/CVE-2016-5062/): Code injection in aternity:aternity (critical 9.8)
- [CVE-2016-5061](https://insights.sbomify.com/CVE-2016-5061/): Cross-site scripting in aternity:aternity (medium 6.1)
- [CVE-2016-5060](https://insights.sbomify.com/CVE-2016-5060/): Cross-site scripting in naver:ngrinder (medium 6.1)
- [CVE-2016-5059](https://insights.sbomify.com/CVE-2016-5059/): Information disclosure in OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 (medium 6.5)
- [CVE-2016-5058](https://insights.sbomify.com/CVE-2016-5058/): Security feature bypass in OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 (high 7.5)
- [CVE-2016-5057](https://insights.sbomify.com/CVE-2016-5057/): Weak cryptography in OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 (high 7.5)
- [CVE-2016-5056](https://insights.sbomify.com/CVE-2016-5056/): Weak cryptography in OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 (high 7.5)
- [CVE-2016-5055](https://insights.sbomify.com/CVE-2016-5055/): Cross-site scripting in OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 (medium 6.1)
- [CVE-2016-5054](https://insights.sbomify.com/CVE-2016-5054/): Security feature bypass in OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 (high 7.5)
- [CVE-2016-5053](https://insights.sbomify.com/CVE-2016-5053/): Missing authorization in OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 (critical 9.8)
- [CVE-2016-5052](https://insights.sbomify.com/CVE-2016-5052/): Weak cryptography in OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 (high 7.5)
- [CVE-2016-5051](https://insights.sbomify.com/CVE-2016-5051/): Information disclosure in OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 (high 7.5)
- [CVE-2016-5050](https://insights.sbomify.com/CVE-2016-5050/): File upload in readydesk:readydesk (critical 9.8)
- [CVE-2016-5049](https://insights.sbomify.com/CVE-2016-5049/): Path traversal in readydesk:readydesk (high 7.5)
- [CVE-2016-5048](https://insights.sbomify.com/CVE-2016-5048/): SQL injection in readydesk:readydesk (critical 9.8)
- [CVE-2016-5047](https://insights.sbomify.com/CVE-2016-5047/): Denial of service in netapp:oncommand system manager (medium 6.5)
- [CVE-2016-5045](https://insights.sbomify.com/CVE-2016-5045/): Information disclosure in netapp:oncommand system manager (high 8.1)
- [CVE-2016-5044](https://insights.sbomify.com/CVE-2016-5044/): Memory corruption in libdwarf project:libdwarf (high 7.5)
- [CVE-2016-5043](https://insights.sbomify.com/CVE-2016-5043/): Memory corruption in libdwarf project:libdwarf (high 7.5)
- [CVE-2016-5042](https://insights.sbomify.com/CVE-2016-5042/): Denial of service in libdwarf project:libdwarf (high 7.5)
- [CVE-2016-5041](https://insights.sbomify.com/CVE-2016-5041/): Null dereference in libdwarf project:libdwarf (high 7.5)
- [CVE-2016-5040](https://insights.sbomify.com/CVE-2016-5040/): Memory corruption in libdwarf project:libdwarf (high 7.5)
- [CVE-2016-5039](https://insights.sbomify.com/CVE-2016-5039/): Memory corruption in libdwarf project:libdwarf (high 7.5)
- [CVE-2016-5038](https://insights.sbomify.com/CVE-2016-5038/): Memory corruption in libdwarf project:libdwarf (high 7.5)
- [CVE-2016-5037](https://insights.sbomify.com/CVE-2016-5037/): Null dereference in libdwarf project:libdwarf (medium 6.5)
- [CVE-2016-5036](https://insights.sbomify.com/CVE-2016-5036/): Memory corruption in libdwarf project:libdwarf (high 7.5)
- [CVE-2016-5035](https://insights.sbomify.com/CVE-2016-5035/): Memory corruption in libdwarf project:libdwarf (medium 6.5)
- [CVE-2016-5034](https://insights.sbomify.com/CVE-2016-5034/): Memory corruption in libdwarf project:libdwarf (medium 6.5)
- [CVE-2016-5033](https://insights.sbomify.com/CVE-2016-5033/): Memory corruption in libdwarf project:libdwarf (medium 6.5)
- [CVE-2016-5032](https://insights.sbomify.com/CVE-2016-5032/): Memory corruption in libdwarf project:libdwarf (medium 6.5)
- [CVE-2016-5031](https://insights.sbomify.com/CVE-2016-5031/): Memory corruption in libdwarf project:libdwarf (medium 5.5)
- [CVE-2016-5030](https://insights.sbomify.com/CVE-2016-5030/): Null dereference in libdwarf project:libdwarf (medium 6.5)
- [CVE-2016-5029](https://insights.sbomify.com/CVE-2016-5029/): Null dereference in libdwarf project:libdwarf (medium 6.5)
- [CVE-2016-5028](https://insights.sbomify.com/CVE-2016-5028/): Null dereference in libdwarf project:libdwarf (medium 6.5)
- [CVE-2016-5027](https://insights.sbomify.com/CVE-2016-5027/): Null dereference in libdwarf project:libdwarf (medium 5.5)
- [CVE-2016-5026](https://insights.sbomify.com/CVE-2016-5026/): Privilege escalation in onionshare:onionshare (medium 5.5)
- [CVE-2016-5025](https://insights.sbomify.com/CVE-2016-5025/): Denial of service in Quadro, NVS, GeForce (all versions) (medium 6.6)
- [CVE-2016-5024](https://insights.sbomify.com/CVE-2016-5024/): Denial of service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM (medium 5.9)
- [CVE-2016-5023](https://insights.sbomify.com/CVE-2016-5023/): Denial of service in f5:big-ip access policy manager (high 7.5)
- [CVE-2016-5022](https://insights.sbomify.com/CVE-2016-5022/): Denial of service in f5:big-ip access policy manager (critical 9.8)
- [CVE-2016-5021](https://insights.sbomify.com/CVE-2016-5021/): Information disclosure in f5:big-ip access policy manager (medium 4.9)
- [CVE-2016-5020](https://insights.sbomify.com/CVE-2016-5020/): Privilege escalation in f5:big-ip access policy manager (high 8.8)
- [CVE-2016-5019](https://insights.sbomify.com/CVE-2016-5019/): Apache MyFaces Trinidad Deserialization Vulnerability (critical 9.8)
- [CVE-2016-5018](https://insights.sbomify.com/CVE-2016-5018/): Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat (critical 9.1)
- [CVE-2016-5017](https://insights.sbomify.com/CVE-2016-5017/): Memory corruption in apache:zookeeper (high 8.1)
- [CVE-2016-5016](https://insights.sbomify.com/CVE-2016-5016/): Cloud Foundry vulnerable to Improper Certificate Validation (medium 5.9)
- [CVE-2016-5014](https://insights.sbomify.com/CVE-2016-5014/): Moodle sensitive information disclosure (medium 5.4)
- [CVE-2016-5013](https://insights.sbomify.com/CVE-2016-5013/): Moodle Does Not Escape Characters In Email Headers (medium 5.4)
- [CVE-2016-5012](https://insights.sbomify.com/CVE-2016-5012/): Moodle Glossary search displays entries without checking user permissions to view them (medium 5.3)
- [CVE-2016-5011](https://insights.sbomify.com/CVE-2016-5011/): Denial of service in ibm:power hardware management console (medium 4.6)
- [CVE-2016-5010](https://insights.sbomify.com/CVE-2016-5010/): Memory corruption in imagemagick:imagemagick (medium 6.5)
- [CVE-2016-5009](https://insights.sbomify.com/CVE-2016-5009/): Denial of service in redhat:ceph (medium 6.5)
- [CVE-2016-5008](https://insights.sbomify.com/CVE-2016-5008/): Auth bypass in debian:debian linux (critical 9.8)
- [CVE-2016-5007](https://insights.sbomify.com/CVE-2016-5007/): Spring Security and Spring Framework may not recognize certain paths that should be protected (high 7.5)
- [CVE-2016-5006](https://insights.sbomify.com/CVE-2016-5006/): Information disclosure in pivotal software:cloud foundry (critical 9.8)
- [CVE-2016-5005](https://insights.sbomify.com/CVE-2016-5005/): Apache Archiva vulnerable to Cross-site Scripting (medium 4.8)
- [CVE-2016-5004](https://insights.sbomify.com/CVE-2016-5004/): ws-xmlrpc DoS Vulnerability (medium 6.5)
- [CVE-2016-5003](https://insights.sbomify.com/CVE-2016-5003/): Apache XML-RPC vulnerable to Deserialization of Untrusted Data (critical 9.8)
- [CVE-2016-5002](https://insights.sbomify.com/CVE-2016-5002/): Apache XML-RPC XXE Vulnerability (high 7.8)
- [CVE-2016-5001](https://insights.sbomify.com/CVE-2016-5001/): Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/38/