# Vulnerabilities published in 2016


- [CVE-2016-4024](https://insights.sbomify.com/CVE-2016-4024/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2016-4021](https://insights.sbomify.com/CVE-2016-4021/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2016-4020](https://insights.sbomify.com/CVE-2016-4020/): Information disclosure in canonical:ubuntu linux (medium 6.5)
- [CVE-2016-4019](https://insights.sbomify.com/CVE-2016-4019/): Other in synacor:zimbra collaboration suite (high 7.5)
- [CVE-2016-4018](https://insights.sbomify.com/CVE-2016-4018/): Missing authorization in sap:hana (high 7.3)
- [CVE-2016-4017](https://insights.sbomify.com/CVE-2016-4017/): Denial of service in sap:hana (high 7.5)
- [CVE-2016-4016](https://insights.sbomify.com/CVE-2016-4016/): Cross-site scripting in sap:java as (medium 6.1)
- [CVE-2016-4015](https://insights.sbomify.com/CVE-2016-4015/): Denial of service in sap:netweaver (high 7.5)
- [CVE-2016-4014](https://insights.sbomify.com/CVE-2016-4014/): XML external entity in sap:netweaver (high 8.6)
- [CVE-2016-4010](https://insights.sbomify.com/CVE-2016-4010/): Deserialization in magento:magento (critical 9.8)
- [CVE-2016-4009](https://insights.sbomify.com/CVE-2016-4009/): Pillow Integer overflow in ImagingResampleHorizontal (critical 9.8)
- [CVE-2016-4008](https://insights.sbomify.com/CVE-2016-4008/): Denial of service in canonical:ubuntu linux (medium 5.9)
- [CVE-2016-4007](https://insights.sbomify.com/CVE-2016-4007/): Command injection in opensuse:leap (critical 9.8)
- [CVE-2016-4006](https://insights.sbomify.com/CVE-2016-4006/): Denial of service in wireshark:wireshark (medium 5.9)
- [CVE-2016-4005](https://insights.sbomify.com/CVE-2016-4005/): Weak cryptography in huawei:hilink app (medium 5.5)
- [CVE-2016-4004](https://insights.sbomify.com/CVE-2016-4004/): Path traversal in dell:openmanage server administrator (medium 4.9)
- [CVE-2016-4003](https://insights.sbomify.com/CVE-2016-4003/): Cross-site Scripting in Apache Struts (medium 6.1)
- [CVE-2016-4002](https://insights.sbomify.com/CVE-2016-4002/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2016-4001](https://insights.sbomify.com/CVE-2016-4001/): Memory corruption in canonical:ubuntu linux (high 8.6)
- [CVE-2016-4000](https://insights.sbomify.com/CVE-2016-4000/): Deserialization of Untrusted Data in Jython (critical 9.8)
- [CVE-2016-3999](https://insights.sbomify.com/CVE-2016-3999/): Cross-site scripting in synacor:zimbra collaboration suite (medium 6.1)
- [CVE-2016-3998](https://insights.sbomify.com/CVE-2016-3998/): Other in netapp:altavault (high 8.1)
- [CVE-2016-3997](https://insights.sbomify.com/CVE-2016-3997/): Security feature bypass in netapp:clustered data ontap (high 7.5)
- [CVE-2016-3996](https://insights.sbomify.com/CVE-2016-3996/): Information disclosure in samsung:knox (medium 5.5)
- [CVE-2016-3995](https://insights.sbomify.com/CVE-2016-3995/): Weak cryptography in cryptopp:crypto\+\+ (high 7.5)
- [CVE-2016-3994](https://insights.sbomify.com/CVE-2016-3994/): Memory corruption in debian:debian linux (high 8.2)
- [CVE-2016-3993](https://insights.sbomify.com/CVE-2016-3993/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2016-3992](https://insights.sbomify.com/CVE-2016-3992/): Race condition in cronic project:cronic (medium 6.2)
- [CVE-2016-3991](https://insights.sbomify.com/CVE-2016-3991/): Memory corruption in libtiff:libtiff (high 7.8)
- [CVE-2016-3990](https://insights.sbomify.com/CVE-2016-3990/): Memory corruption in libtiff:libtiff (high 7.8)
- [CVE-2016-3989](https://insights.sbomify.com/CVE-2016-3989/): Privilege escalation in meinberg:ims-lantime m1000 (high 8.1)
- [CVE-2016-3988](https://insights.sbomify.com/CVE-2016-3988/): Memory corruption in meinberg:ims-lantime m1000 (high 7.3)
- [CVE-2016-3987](https://insights.sbomify.com/CVE-2016-3987/): Command injection in trendmicro:password manager (critical 9.8)
- [CVE-2016-3986](https://insights.sbomify.com/CVE-2016-3986/): Memory corruption in avast:avast (high 7.8)
- [CVE-2016-3985](https://insights.sbomify.com/CVE-2016-3985/): Security feature bypass in pulsesecure:pulse connect secure (medium 6.5)
- [CVE-2016-3984](https://insights.sbomify.com/CVE-2016-3984/): Security feature bypass in mcafee:active response (medium 5.1)
- [CVE-2016-3983](https://insights.sbomify.com/CVE-2016-3983/): Security feature bypass in mcafee:advanced threat defense (high 7.5)
- [CVE-2016-3982](https://insights.sbomify.com/CVE-2016-3982/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2016-3981](https://insights.sbomify.com/CVE-2016-3981/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2016-3980](https://insights.sbomify.com/CVE-2016-3980/): Denial of service in sap:application server java (high 7.5)
- [CVE-2016-3979](https://insights.sbomify.com/CVE-2016-3979/): Memory corruption in sap:java as (high 7.5)
- [CVE-2016-3978](https://insights.sbomify.com/CVE-2016-3978/): Open redirect in fortinet:fortios (medium 6.1)
- [CVE-2016-3977](https://insights.sbomify.com/CVE-2016-3977/): Memory corruption in giflib project:giflib (medium 5.5)
- [CVE-2016-3976](https://insights.sbomify.com/CVE-2016-3976/): SAP NetWeaver Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2016-3975](https://insights.sbomify.com/CVE-2016-3975/): Cross-site scripting in sap:netweaver application server java (medium 6.1)
- [CVE-2016-3974](https://insights.sbomify.com/CVE-2016-3974/): XML external entity in sap:netweaver application server java (critical 9.1)
- [CVE-2016-3973](https://insights.sbomify.com/CVE-2016-3973/): Information disclosure in sap:netweaver application server java (medium 5.3)
- [CVE-2016-3972](https://insights.sbomify.com/CVE-2016-3972/): Path traversal in dotcms:dotcms (low 2.7)
- [CVE-2016-3971](https://insights.sbomify.com/CVE-2016-3971/): Cross-site scripting in dotcms:dotcms (medium 4.8)
- [CVE-2016-3969](https://insights.sbomify.com/CVE-2016-3969/): Cross-site scripting in mcafee:email gateway (medium 6.1)
- [CVE-2016-3968](https://insights.sbomify.com/CVE-2016-3968/): Cross-site scripting in sophos:cyberoam cr100ing utm firmware (medium 6.1)
- [CVE-2016-3963](https://insights.sbomify.com/CVE-2016-3963/): Denial of service in siemens:scalance s613 (medium 5.3)
- [CVE-2016-3962](https://insights.sbomify.com/CVE-2016-3962/): Memory corruption in meinberg:ims-lantime m1000 (high 7.3)
- [CVE-2016-3961](https://insights.sbomify.com/CVE-2016-3961/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2016-3960](https://insights.sbomify.com/CVE-2016-3960/): Integer overflow in fedoraproject:fedora (high 8.8)
- [CVE-2016-3959](https://insights.sbomify.com/CVE-2016-3959/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2016-3958](https://insights.sbomify.com/CVE-2016-3958/): Privilege escalation in golang:go (high 7.8)
- [CVE-2016-3957](https://insights.sbomify.com/CVE-2016-3957/): Deserialization in web2py:web2py (critical 9.8)
- [CVE-2016-3956](https://insights.sbomify.com/CVE-2016-3956/): npm Token Leak in npm (high 7.5)
- [CVE-2016-3955](https://insights.sbomify.com/CVE-2016-3955/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2016-3954](https://insights.sbomify.com/CVE-2016-3954/): web2py exposure of sensitive information (medium 5.5)
- [CVE-2016-3953](https://insights.sbomify.com/CVE-2016-3953/): web2py remote code execution via hardcoded encryption key in session.connect function (critical 9.8)
- [CVE-2016-3952](https://insights.sbomify.com/CVE-2016-3952/): Information disclosure in web2py:web2py (high 7.8)
- [CVE-2016-3951](https://insights.sbomify.com/CVE-2016-3951/): Memory corruption in canonical:ubuntu linux (medium 4.6)
- [CVE-2016-3950](https://insights.sbomify.com/CVE-2016-3950/): Denial of service in huawei:ar3200 firmware (medium 6.5)
- [CVE-2016-3949](https://insights.sbomify.com/CVE-2016-3949/): Denial of service in siemens:simatic s7-300 with profitnet support firmware (high 7.5)
- [CVE-2016-3948](https://insights.sbomify.com/CVE-2016-3948/): Memory corruption in squid-cache:squid (high 7.5)
- [CVE-2016-3947](https://insights.sbomify.com/CVE-2016-3947/): Memory corruption in canonical:ubuntu linux (high 8.2)
- [CVE-2016-3946](https://insights.sbomify.com/CVE-2016-3946/): Information disclosure in sap:sapconsole (high 7.8)
- [CVE-2016-3945](https://insights.sbomify.com/CVE-2016-3945/): Integer overflow in libtiff:libtiff (high 7.8)
- [CVE-2016-3944](https://insights.sbomify.com/CVE-2016-3944/): Code injection in lenovo:accelerator application (high 7.5)
- [CVE-2016-3943](https://insights.sbomify.com/CVE-2016-3943/): Misconfiguration in watchguard:panda endpoint administration agent (high 7.8)
- [CVE-2016-3941](https://insights.sbomify.com/CVE-2016-3941/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2016-3940](https://insights.sbomify.com/CVE-2016-3940/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3939](https://insights.sbomify.com/CVE-2016-3939/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3938](https://insights.sbomify.com/CVE-2016-3938/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3937](https://insights.sbomify.com/CVE-2016-3937/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3936](https://insights.sbomify.com/CVE-2016-3936/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3935](https://insights.sbomify.com/CVE-2016-3935/): Integer overflow in google:android (high 7.8)
- [CVE-2016-3934](https://insights.sbomify.com/CVE-2016-3934/): Memory corruption in google:android (high 7.8)
- [CVE-2016-3933](https://insights.sbomify.com/CVE-2016-3933/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3932](https://insights.sbomify.com/CVE-2016-3932/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3931](https://insights.sbomify.com/CVE-2016-3931/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3930](https://insights.sbomify.com/CVE-2016-3930/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3929](https://insights.sbomify.com/CVE-2016-3929/): Other in google:android (critical 9.8)
- [CVE-2016-3928](https://insights.sbomify.com/CVE-2016-3928/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3927](https://insights.sbomify.com/CVE-2016-3927/): Other in google:android (critical 9.8)
- [CVE-2016-3926](https://insights.sbomify.com/CVE-2016-3926/): Other in google:android (critical 9.8)
- [CVE-2016-3925](https://insights.sbomify.com/CVE-2016-3925/): Denial of service in google:android (medium 5.5)
- [CVE-2016-3924](https://insights.sbomify.com/CVE-2016-3924/): Information disclosure in google:android (medium 5.5)
- [CVE-2016-3923](https://insights.sbomify.com/CVE-2016-3923/): Privilege escalation in google:android (medium 5.5)
- [CVE-2016-3922](https://insights.sbomify.com/CVE-2016-3922/): Memory corruption in google:android (high 7.8)
- [CVE-2016-3921](https://insights.sbomify.com/CVE-2016-3921/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3920](https://insights.sbomify.com/CVE-2016-3920/): Denial of service in google:android (medium 5.5)
- [CVE-2016-3918](https://insights.sbomify.com/CVE-2016-3918/): Information disclosure in google:android (medium 5.5)
- [CVE-2016-3917](https://insights.sbomify.com/CVE-2016-3917/): Auth bypass in google:android (high 7.8)
- [CVE-2016-3916](https://insights.sbomify.com/CVE-2016-3916/): Memory corruption in google:android (high 7.8)
- [CVE-2016-3915](https://insights.sbomify.com/CVE-2016-3915/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-3914](https://insights.sbomify.com/CVE-2016-3914/): Race condition in google:android (high 7.8)
- [CVE-2016-3913](https://insights.sbomify.com/CVE-2016-3913/): Privilege escalation in google:android (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/48/