Vulnerabilities published in 2016
9,398 vulnerabilities were published in 2016: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 39 of 94.
- CVE-2016-5000 Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability
- CVE-2016-4999 SQL injection in redhat:dashbuilder
- CVE-2016-4998 Memory corruption in canonical:ubuntu linux
- CVE-2016-4997 Memory corruption in canonical:ubuntu linux
- CVE-2016-4996 Information disclosure in redhat:satellite
- CVE-2016-4995 Missing authorization in theforeman:foreman
- CVE-2016-4994 Use after free in gimp:gimp
- CVE-2016-4993 Improper Neutralization of CRLF Sequences in Wildfly Undertow
- CVE-2016-4992 Information disclosure in redhat:enterprise linux desktop
- CVE-2016-4991 Command injection in nodepdf
- CVE-2016-4989 Command injection in redhat:enterprise linux desktop
- CVE-2016-4988 Cross-site Scripting in Jenkins Build Failure Analyzer plugin
- CVE-2016-4987 Jenkins Image Gallery Plugin allows Path Traversal
- CVE-2016-4986 Jenkins TAP Plugin allows Path Traversal
- CVE-2016-4985 OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2016-4984 Race condition in openldap:openldap-servers
- CVE-2016-4983 Misconfiguration in dovecot22
- CVE-2016-4982 Race condition in teether:authd
- CVE-2016-4980 Weak cryptography in xguest
- CVE-2016-4979 Security feature bypass in apache:http server
- CVE-2016-4978 Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain
- CVE-2016-4977 Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views
- CVE-2016-4976 Apache Ambari reveals administrator passwords
- CVE-2016-4975 mod_userdir CRLF injection
- CVE-2016-4974 Improper Input Validation in Apache Qpid AMQP 0-x JMS
- CVE-2016-4973 Memory corruption in gnu:libssp
- CVE-2016-4972 OpenStack Murano Code Execution
- CVE-2016-4971 Path traversal in canonical:ubuntu linux
- CVE-2016-4970 Loop with Unreachable Exit Condition in Netty
- CVE-2016-4969 Cross-site scripting in fortinet:fortiwan
- CVE-2016-4968 Information disclosure in fortinet:fortiwan
- CVE-2016-4967 Information disclosure in fortinet:fortiwan
- CVE-2016-4966 Auth bypass in fortinet:fortiwan
- CVE-2016-4965 Command injection in fortinet:fortiwan
- CVE-2016-4964 Denial of service in qemu:qemu
- CVE-2016-4963 Denial of service in xen:xen
- CVE-2016-4962 Privilege escalation in oracle:vm server
- CVE-2016-4961 Denial of service in Quadro, NVS, GeForce (all versions)
- CVE-2016-4960 Privilege escalation in Quadro, NVS, GeForce (all versions)
- CVE-2016-4959 Null dereference in Quadro, NVS, GeForce (all versions)
- CVE-2016-4957 Null dereference in novell:suse manager
- CVE-2016-4956 Denial of service in novell:suse manager
- CVE-2016-4955 Race condition in novell:suse manager
- CVE-2016-4954 Race condition in ntp:ntp
- CVE-2016-4953 Auth bypass in ntp:ntp
- CVE-2016-4952 Memory corruption in canonical:ubuntu linux
- CVE-2016-4951 Null dereference in canonical:ubuntu linux
- CVE-2016-4950 Information disclosure in cloudera:manager
- CVE-2016-4949 Information disclosure in cloudera:manager
- CVE-2016-4948 Cross-site scripting in cloudera:manager
- CVE-2016-4947 Cloudera HUE Account Enumeration
- CVE-2016-4946 Cross-site scripting in cloudera:hue
- CVE-2016-4945 Cross-site scripting in citrix:netscaler gateway 11.0 firmware
- CVE-2016-4931 XML external entity in juniper:junos space
- CVE-2016-4930 Cross-site scripting in juniper:junos space
- CVE-2016-4929 Command injection in juniper:junos space
- CVE-2016-4928 Cross-site request forgery in juniper:junos space
- CVE-2016-4927 Security feature bypass in juniper:junos space
- CVE-2016-4926 Auth bypass in juniper:junos space
- CVE-2016-4925 JUNOSe: Line Card Reset: processor exception 0x68616c74 (halt) task: scheduler, upon receipt of crafted IPv6 packet
- CVE-2016-4924 vMX: Information leak vulnerability
- CVE-2016-4923 Junos J-Web: Cross Site Scripting Vulnerability
- CVE-2016-4922 Junos: Privilege escalation vulnerabilities in Junos CLI
- CVE-2016-4921 Junos: IPv6 denial of service vulnerability due to resource exhaustion (CVE-2016-4921)
- CVE-2016-4913 Information disclosure in canonical:ubuntu linux
- CVE-2016-4912 Null dereference in openslp:openslp
- CVE-2016-4911 OpenStack Identity Keystone Improper Access Control
- CVE-2016-4910 Missing authorization in Cybozu Garoon
- CVE-2016-4909 Cross-site request forgery in Cybozu Garoon
- CVE-2016-4908 Missing authorization in Cybozu Garoon
- CVE-2016-4907 Cross-site request forgery in Cybozu Garoon
- CVE-2016-4906 Cross-site scripting in Cybozu Garoon
- CVE-2016-4905 SQL injection in WP-OliveCart
- CVE-2016-4904 Cross-site request forgery in WP-OliveCart
- CVE-2016-4903 Cross-site scripting in WP-OliveCart
- CVE-2016-4902 Other in The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)"
- CVE-2016-4901 Other in The installer of e-Tax Software
- CVE-2016-4900 Other in Evernote for Windows
- CVE-2016-4899 Command injection in novastor:novabackup datacenter
- CVE-2016-4898 Command injection in novastor:novabackup datacenter
- CVE-2016-4897 Cross-site scripting in webmin:usermin
- CVE-2016-4896 Auth bypass in setucocms project:setucocms
- CVE-2016-4895 Code injection in setucocms project:setucocms
- CVE-2016-4894 Denial of service in setucocms project:setucocms
- CVE-2016-4893 SQL injection in setucocms project:setucocms
- CVE-2016-4892 Cross-site scripting in setucocms project:setucocms
- CVE-2016-4891 Cross-site request forgery in setucocms project:setucocms
- CVE-2016-4890 Weak cryptography in zohocorp:servicedesk plus
- CVE-2016-4889 Missing authorization in zohocorp:servicedesk plus
- CVE-2016-4888 Cross-site scripting in zohocorp:servicedesk plus
- CVE-2016-4887 Cross-site request forgery in baserCMS plugin Uploader
- CVE-2016-4886 Cross-site request forgery in baserCMS plugin Mail
- CVE-2016-4885 Cross-site request forgery in baserCMS plugin Feed
- CVE-2016-4884 Cross-site request forgery in baserCMS plugin Blog
- CVE-2016-4883 Cross-site scripting in baserCMS
- CVE-2016-4882 Cross-site request forgery in baserCMS
- CVE-2016-4881 CSRF in baserCMS 3.0.10 and earlier
- CVE-2016-4880 baserCMS Cross-site Scripting vulnerability
- CVE-2016-4879 CSRF in baserCMS 3.0.10 and earlier
- CVE-2016-4878 baserCMS Cross Site Request Forgery vulnerability