# Vulnerabilities published in 2016


- [CVE-2016-4554](https://insights.sbomify.com/CVE-2016-4554/): Security feature bypass in canonical:ubuntu linux (high 8.6)
- [CVE-2016-4553](https://insights.sbomify.com/CVE-2016-4553/): Other in canonical:ubuntu linux (high 8.6)
- [CVE-2016-4552](https://insights.sbomify.com/CVE-2016-4552/): Cross-site scripting in roundcube:webmail (medium 6.1)
- [CVE-2016-4551](https://insights.sbomify.com/CVE-2016-4551/): Security feature bypass in sap:netweaver (high 7.5)
- [CVE-2016-4547](https://insights.sbomify.com/CVE-2016-4547/): Denial of service in samsung:samsung mobile (high 7.5)
- [CVE-2016-4546](https://insights.sbomify.com/CVE-2016-4546/): Denial of service in samsung:samsung mobile (medium 5.5)
- [CVE-2016-4545](https://insights.sbomify.com/CVE-2016-4545/): Denial of service in f5:big-ip access policy manager (high 7.5)
- [CVE-2016-4544](https://insights.sbomify.com/CVE-2016-4544/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2016-4543](https://insights.sbomify.com/CVE-2016-4543/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2016-4542](https://insights.sbomify.com/CVE-2016-4542/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2016-4541](https://insights.sbomify.com/CVE-2016-4541/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2016-4540](https://insights.sbomify.com/CVE-2016-4540/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2016-4539](https://insights.sbomify.com/CVE-2016-4539/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2016-4538](https://insights.sbomify.com/CVE-2016-4538/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2016-4537](https://insights.sbomify.com/CVE-2016-4537/): Other in fedoraproject:fedora (critical 9.8)
- [CVE-2016-4536](https://insights.sbomify.com/CVE-2016-4536/): Information disclosure in openafs:openafs (medium 5.3)
- [CVE-2016-4535](https://insights.sbomify.com/CVE-2016-4535/): Integer overflow in mcafee:livesafe (high 7.5)
- [CVE-2016-4534](https://insights.sbomify.com/CVE-2016-4534/): Security feature bypass in mcafee:virusscan enterprise (low 3.0)
- [CVE-2016-4533](https://insights.sbomify.com/CVE-2016-4533/): Memory corruption in wecon:levistudiou (high 7.8)
- [CVE-2016-4532](https://insights.sbomify.com/CVE-2016-4532/): Path traversal in trihedral:vtscada (critical 9.1)
- [CVE-2016-4531](https://insights.sbomify.com/CVE-2016-4531/): Auth bypass in rockwellautomation:factorytalk energrymetrix (high 7.3)
- [CVE-2016-4530](https://insights.sbomify.com/CVE-2016-4530/): Denial of service in osisoft:pi sql data access server 2016 (medium 6.5)
- [CVE-2016-4529](https://insights.sbomify.com/CVE-2016-4529/): Code injection in schneider-electric:somachine hvac firmware (high 7.3)
- [CVE-2016-4528](https://insights.sbomify.com/CVE-2016-4528/): Memory corruption in advantech:webaccess (medium 5.0)
- [CVE-2016-4527](https://insights.sbomify.com/CVE-2016-4527/): Information disclosure in abb:pcm600 (low 3.3)
- [CVE-2016-4526](https://insights.sbomify.com/CVE-2016-4526/): Privilege escalation in trane:tracer sc (high 7.5)
- [CVE-2016-4525](https://insights.sbomify.com/CVE-2016-4525/): Other in advantech:webaccess (medium 6.6)
- [CVE-2016-4524](https://insights.sbomify.com/CVE-2016-4524/): Information disclosure in abb:pcm600 (medium 6.5)
- [CVE-2016-4523](https://insights.sbomify.com/CVE-2016-4523/): Trihedral VTScada (formerly VTS) Denial-of-Service (high 7.5, exploited in the wild)
- [CVE-2016-4522](https://insights.sbomify.com/CVE-2016-4522/): SQL injection in rockwellautomation:factorytalk energrymetrix (critical 9.8)
- [CVE-2016-4521](https://insights.sbomify.com/CVE-2016-4521/): Hardcoded credentials in sixnet:bt-5 series cellular router firmware (critical 9.8)
- [CVE-2016-4520](https://insights.sbomify.com/CVE-2016-4520/): Hardcoded credentials in schneider-electric:pelco digital sentry video management system firmware (critical 9.8)
- [CVE-2016-4519](https://insights.sbomify.com/CVE-2016-4519/): Memory corruption in unitronics:visilogic oplc ide (critical 9.8)
- [CVE-2016-4518](https://insights.sbomify.com/CVE-2016-4518/): Denial of service in osisoft:pi af server 2016 (medium 6.5)
- [CVE-2016-4516](https://insights.sbomify.com/CVE-2016-4516/): Information disclosure in abb:pcm600 (low 3.3)
- [CVE-2016-4514](https://insights.sbomify.com/CVE-2016-4514/): Missing authorization in moxa:pt-7728 (high 7.7)
- [CVE-2016-4513](https://insights.sbomify.com/CVE-2016-4513/): Cross-site scripting in schneider-electric:powerlogic pm8ecc firmware (medium 6.1)
- [CVE-2016-4512](https://insights.sbomify.com/CVE-2016-4512/): Memory corruption in eaton:elcsoft (high 7.3)
- [CVE-2016-4511](https://insights.sbomify.com/CVE-2016-4511/): Weak cryptography in abb:pcm600 (low 2.8)
- [CVE-2016-4510](https://insights.sbomify.com/CVE-2016-4510/): Auth bypass in trihedral:vtscada (critical 9.1)
- [CVE-2016-4509](https://insights.sbomify.com/CVE-2016-4509/): Memory corruption in eaton:elcsoft (medium 6.0)
- [CVE-2016-4508](https://insights.sbomify.com/CVE-2016-4508/): Cross-site scripting in bosch:bladecontrol-webvis (medium 6.1)
- [CVE-2016-4507](https://insights.sbomify.com/CVE-2016-4507/): SQL injection in bosch:bladecontrol-webvis (medium 6.4)
- [CVE-2016-4506](https://insights.sbomify.com/CVE-2016-4506/): Cross-site request forgery in resourcedm:intuitive 650 tdb controller (high 8.0)
- [CVE-2016-4505](https://insights.sbomify.com/CVE-2016-4505/): Missing authorization in resourcedm:intuitive 650 tdb controller (high 8.8)
- [CVE-2016-4504](https://insights.sbomify.com/CVE-2016-4504/): Cross-site request forgery in Meteocontrol WEB'log (high 8.8)
- [CVE-2016-4503](https://insights.sbomify.com/CVE-2016-4503/): Auth bypass in moxa:device server web console 5232-n firmware (critical 9.8)
- [CVE-2016-4502](https://insights.sbomify.com/CVE-2016-4502/): Auth bypass in envirosys:esc 8832 data controller (high 7.5)
- [CVE-2016-4501](https://insights.sbomify.com/CVE-2016-4501/): Auth bypass in envirosys:esc 8832 data controller (critical 9.1)
- [CVE-2016-4500](https://insights.sbomify.com/CVE-2016-4500/): Other in moxa:uc-7408 lx-plus (medium 5.8)
- [CVE-2016-4499](https://insights.sbomify.com/CVE-2016-4499/): Memory corruption in panasonic:fpwin pro (medium 4.2)
- [CVE-2016-4498](https://insights.sbomify.com/CVE-2016-4498/): Memory corruption in panasonic:fpwin pro (medium 5.5)
- [CVE-2016-4497](https://insights.sbomify.com/CVE-2016-4497/): Memory corruption in panasonic:fpwin pro (medium 4.2)
- [CVE-2016-4496](https://insights.sbomify.com/CVE-2016-4496/): Integer overflow in panasonic:fpwin pro (medium 4.2)
- [CVE-2016-4495](https://insights.sbomify.com/CVE-2016-4495/): Auth bypass in kmc controls:bac-5051e firmware (medium 5.3)
- [CVE-2016-4494](https://insights.sbomify.com/CVE-2016-4494/): Cross-site request forgery in kmc controls:bac-5051e firmware (high 8.8)
- [CVE-2016-4493](https://insights.sbomify.com/CVE-2016-4493/): Memory corruption in gnu:libiberty (medium 5.5)
- [CVE-2016-4492](https://insights.sbomify.com/CVE-2016-4492/): Memory corruption in gnu:libiberty (medium 4.4)
- [CVE-2016-4491](https://insights.sbomify.com/CVE-2016-4491/): Memory corruption in gnu:libiberty (medium 5.5)
- [CVE-2016-4490](https://insights.sbomify.com/CVE-2016-4490/): Integer overflow in gnu:libiberty (medium 5.5)
- [CVE-2016-4489](https://insights.sbomify.com/CVE-2016-4489/): Integer overflow in gnu:libiberty (medium 5.5)
- [CVE-2016-4488](https://insights.sbomify.com/CVE-2016-4488/): Use after free in gnu:libiberty (medium 5.5)
- [CVE-2016-4487](https://insights.sbomify.com/CVE-2016-4487/): Use after free in gnu:libiberty (medium 5.5)
- [CVE-2016-4486](https://insights.sbomify.com/CVE-2016-4486/): Information disclosure in canonical:ubuntu linux (low 3.3)
- [CVE-2016-4485](https://insights.sbomify.com/CVE-2016-4485/): Information disclosure in canonical:ubuntu linux (high 7.5)
- [CVE-2016-4484](https://insights.sbomify.com/CVE-2016-4484/): Auth bypass in cryptsetup project:cryptsetup (medium 6.8)
- [CVE-2016-4483](https://insights.sbomify.com/CVE-2016-4483/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2016-4482](https://insights.sbomify.com/CVE-2016-4482/): Information disclosure in canonical:ubuntu linux (medium 6.2)
- [CVE-2016-4480](https://insights.sbomify.com/CVE-2016-4480/): Privilege escalation in oracle:vm server (high 8.4)
- [CVE-2016-4478](https://insights.sbomify.com/CVE-2016-4478/): Memory corruption in atheme:atheme (high 7.5)
- [CVE-2016-4477](https://insights.sbomify.com/CVE-2016-4477/): Command injection in google:android (high 7.8)
- [CVE-2016-4476](https://insights.sbomify.com/CVE-2016-4476/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2016-4475](https://insights.sbomify.com/CVE-2016-4475/): Missing authorization in theforeman:foreman (high 8.8)
- [CVE-2016-4474](https://insights.sbomify.com/CVE-2016-4474/): Hardcoded credentials in redhat:openstack (high 8.8)
- [CVE-2016-4473](https://insights.sbomify.com/CVE-2016-4473/): Use after free in php:php (critical 9.8)
- [CVE-2016-4472](https://insights.sbomify.com/CVE-2016-4472/): Memory corruption in canonical:ubuntu linux (high 8.1)
- [CVE-2016-4471](https://insights.sbomify.com/CVE-2016-4471/): Code injection in redhat:cloudforms (high 8.8)
- [CVE-2016-4470](https://insights.sbomify.com/CVE-2016-4470/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2016-4469](https://insights.sbomify.com/CVE-2016-4469/): Cross-site request forgery in apache:archiva (high 8.8)
- [CVE-2016-4468](https://insights.sbomify.com/CVE-2016-4468/): SQL injection in cloudfoundry:cloud foundry uaa bosh (high 8.8)
- [CVE-2016-4467](https://insights.sbomify.com/CVE-2016-4467/): Security feature bypass in apache:qpid proton (medium 5.9)
- [CVE-2016-4465](https://insights.sbomify.com/CVE-2016-4465/): Apache Struts vulnerable to possible DoS attack when using URLValidator (medium 5.3)
- [CVE-2016-4464](https://insights.sbomify.com/CVE-2016-4464/): High severity vulnerability that affects org.apache.cxf.fediz:fediz-spring and org.apache.cxf.fediz:fediz-spring2 (critical 9.8)
- [CVE-2016-4463](https://insights.sbomify.com/CVE-2016-4463/): Memory corruption in apache:xerces-c\+\+ (high 7.5)
- [CVE-2016-4462](https://insights.sbomify.com/CVE-2016-4462/): Code injection in Apache OFBiz (high 8.8)
- [CVE-2016-4461](https://insights.sbomify.com/CVE-2016-4461/): Apache Struts forced double OGNL evaluation (high 8.8)
- [CVE-2016-4460](https://insights.sbomify.com/CVE-2016-4460/): Auth bypass in apache:pony mail (critical 9.8)
- [CVE-2016-4459](https://insights.sbomify.com/CVE-2016-4459/): Memory corruption in redhat:enterprise linux (high 7.5)
- [CVE-2016-4457](https://insights.sbomify.com/CVE-2016-4457/): Hardcoded credentials in redhat:cloudforms management engine (high 7.5)
- [CVE-2016-4456](https://insights.sbomify.com/CVE-2016-4456/): Other in gnu:gnutls (high 7.5)
- [CVE-2016-4455](https://insights.sbomify.com/CVE-2016-4455/): Misconfiguration in redhat:enterprise linux desktop (low 3.3)
- [CVE-2016-4454](https://insights.sbomify.com/CVE-2016-4454/): Memory corruption in canonical:ubuntu linux (medium 6.0)
- [CVE-2016-4453](https://insights.sbomify.com/CVE-2016-4453/): Denial of service in canonical:ubuntu linux (medium 4.4)
- [CVE-2016-4451](https://insights.sbomify.com/CVE-2016-4451/): Missing authorization in theforeman:foreman (medium 5.0)
- [CVE-2016-4450](https://insights.sbomify.com/CVE-2016-4450/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2016-4449](https://insights.sbomify.com/CVE-2016-4449/): XML external entity in canonical:ubuntu linux (high 7.1)
- [CVE-2016-4448](https://insights.sbomify.com/CVE-2016-4448/): Memory corruption in apple:icloud (critical 9.8)
- [CVE-2016-4447](https://insights.sbomify.com/CVE-2016-4447/): Memory corruption in apple:iphone os (high 7.5)
- [CVE-2016-4446](https://insights.sbomify.com/CVE-2016-4446/): Command injection in redhat:enterprise linux desktop (high 7.0)
- [CVE-2016-4445](https://insights.sbomify.com/CVE-2016-4445/): Command injection in redhat:enterprise linux desktop (high 7.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/43/