Vulnerabilities published in 2016
9,398 vulnerabilities were published in 2016: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 40 of 94.
- CVE-2016-4877 Cross-site scripting in baserCMS plugin Mail
- CVE-2016-4876 Cross-site request forgery in baserCMS
- CVE-2016-4875 Cross-site scripting in assist project:assist plugin
- CVE-2016-4874 Other in cybozu:office
- CVE-2016-4873 Missing authorization in cybozu:office
- CVE-2016-4872 Missing authorization in cybozu:office
- CVE-2016-4871 Denial of service in cybozu:office
- CVE-2016-4870 Cross-site scripting in cybozu:office
- CVE-2016-4869 Information disclosure in cybozu:office
- CVE-2016-4868 Other in cybozu:office
- CVE-2016-4867 Missing authorization in cybozu:office
- CVE-2016-4866 Cross-site scripting in cybozu:office
- CVE-2016-4865 Cross-site scripting in cybozu:office
- CVE-2016-4864 Denial of service in H2O
- CVE-2016-4863 Auth bypass in FlashAir Class 6 model
- CVE-2016-4862 Code injection in cs-cart:cs-cart
- CVE-2016-4861 Zend Framework Allows SQL Injection
- CVE-2016-4860 Auth bypass in yokogawa:stardom fcn\/fcj
- CVE-2016-4859 Open redirect in Splunk Enterprise
- CVE-2016-4858 Cross-site scripting in Splunk Enterprise
- CVE-2016-4857 Open redirect in Splunk Enterprise
- CVE-2016-4856 Cross-site scripting in Splunk Enterprise
- CVE-2016-4855 ADOdb Cross-site scripting vulnerability in old test script
- CVE-2016-4854 Cross-site request forgery in L-04D
- CVE-2016-4853 Command injection in akabei soft2:happy wardrobe
- CVE-2016-4852 Denial of service in aki-null:yorufukurou
- CVE-2016-4851 Cross-site scripting in let\'s php\!:simple chat
- CVE-2016-4850 Other in linecorp:line
- CVE-2016-4849 Cross-site scripting in geeklog project:geeklog
- CVE-2016-4848 Cross-site scripting in clip-bucket:clipbucket
- CVE-2016-4847 Cross-site scripting in ossec:web ui
- CVE-2016-4846 Other in securebrain:phishwall client
- CVE-2016-4845 Cross-site request forgery in iodata:hvl-a2.0 firmware
- CVE-2016-4844 Other in cybozu:mailwise
- CVE-2016-4843 Information disclosure in cybozu:mailwise
- CVE-2016-4842 Information disclosure in cybozu:mailwise
- CVE-2016-4841 Other in cybozu:mailwise
- CVE-2016-4840 Security feature bypass in toshiba:coordinate plus
- CVE-2016-4839 Information disclosure in Money Forward
- CVE-2016-4838 Other in Money Forward
- CVE-2016-4837 SQL injection in ec-cube:discount coupon
- CVE-2016-4834 Missing authorization in vtiger:vtiger crm
- CVE-2016-4833 Cross-site scripting in nofollow links project:nofollow links
- CVE-2016-4832 Security feature bypass in aeon:waon
- CVE-2016-4831 Privilege escalation in linecorp:line
- CVE-2016-4830 Security feature bypass in akindo-sushiro:sushiro
- CVE-2016-4829 Security feature bypass in dmm:ppv play player
- CVE-2016-4828 Auth bypass in welcart:welcart e-commerce
- CVE-2016-4827 Cross-site scripting in welcart:welcart e-commerce
- CVE-2016-4826 Cross-site scripting in welcart:welcart e-commerce
- CVE-2016-4825 Deserialization in welcart:welcart e-commerce
- CVE-2016-4824 Auth bypass in corega:cg-wlr300gnv-w firmware
- CVE-2016-4823 Denial of service in corega:cg-wlbaragm firmware
- CVE-2016-4822 Command injection in corega:cg-wlbargl firmware
- CVE-2016-4821 Denial of service in iodata:etx-r firmware
- CVE-2016-4820 Cross-site request forgery in iodata:etx-r firmware
- CVE-2016-4819 Memory corruption in dx library project:dx library
- CVE-2016-4818 Security feature bypass in dmm:dmmfx demo trade
- CVE-2016-4817 Use after free in dena:h2o
- CVE-2016-4816 Information disclosure in buffalo:bhr-4grv firmware
- CVE-2016-4815 Path traversal in buffalo:wzr-600dhp2 firmware
- CVE-2016-4814 Path traversal in gsi:old gsi maps
- CVE-2016-4813 Privilege escalation in netcommons:netcommons
- CVE-2016-4812 Cross-site scripting in markdown on saved improved project:markdown on saved improved
- CVE-2016-4811 Security feature bypass in ntt-bp:japan connected-free wi-fi
- CVE-2016-4810 Missing authorization in citrix:xenapp
- CVE-2016-4809 Denial of service in libarchive:libarchive
- CVE-2016-4808 Web2py Cross-Site Request Forgery vulnerability
- CVE-2016-4807 Web2py Reflected XSS vulnerability
- CVE-2016-4806 Path traversal in web2py:web2py
- CVE-2016-4805 Use after free in canonical:ubuntu linux
- CVE-2016-4804 Memory corruption in canonical:ubuntu linux
- CVE-2016-4803 Other in dotcms:dotcms
- CVE-2016-4802 Other in haxx:curl
- CVE-2016-4800 Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request
- CVE-2016-4797 Denial of service in fedoraproject:fedora
- CVE-2016-4796 Memory corruption in fedoraproject:fedora
- CVE-2016-4794 Use after free in canonical:ubuntu linux
- CVE-2016-4793 CakePHP allows remote attackers to spoof their IP
- CVE-2016-4792 Information disclosure in ivanti:connect secure
- CVE-2016-4791 Path traversal in ivanti:connect secure
- CVE-2016-4790 Cross-site scripting in ivanti:connect secure
- CVE-2016-4789 Cross-site scripting in ivanti:connect secure
- CVE-2016-4788 Information disclosure in ivanti:connect secure
- CVE-2016-4787 Information disclosure in ivanti:connect secure
- CVE-2016-4786 Denial of service in ivanti:connect secure
- CVE-2016-4785 Information disclosure in siemens:siprotec firmware
- CVE-2016-4784 Information disclosure in siemens:siprotec firmware
- CVE-2016-4783 Cross-site scripting in lenovo:shareit
- CVE-2016-4782 Other in lenovo:shareit
- CVE-2016-4781 Security feature bypass in apple:iphone os
- CVE-2016-4780 Null dereference in apple:mac os x
- CVE-2016-4779 Memory corruption in apple:mac os x
- CVE-2016-4778 Memory corruption in apple:iphone os
- CVE-2016-4777 Null dereference in apple:iphone os
- CVE-2016-4776 Memory corruption in apple:iphone os
- CVE-2016-4775 Memory corruption in apple:mac os x
- CVE-2016-4774 Memory corruption in apple:iphone os
- CVE-2016-4773 Memory corruption in apple:iphone os
- CVE-2016-4772 Denial of service in apple:iphone os