# Vulnerabilities published in 2016


- [CVE-2016-9448](https://insights.sbomify.com/CVE-2016-9448/): Null dereference in n/a (high 7.5)
- [CVE-2016-9447](https://insights.sbomify.com/CVE-2016-9447/): Memory corruption in n/a (high 7.8)
- [CVE-2016-9446](https://insights.sbomify.com/CVE-2016-9446/): Information disclosure in n/a (high 7.5)
- [CVE-2016-9445](https://insights.sbomify.com/CVE-2016-9445/): Integer overflow in n/a (high 7.5)
- [CVE-2016-9444](https://insights.sbomify.com/CVE-2016-9444/): Denial of service in n/a (high 7.5)
- [CVE-2016-9443](https://insights.sbomify.com/CVE-2016-9443/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9442](https://insights.sbomify.com/CVE-2016-9442/): Memory corruption in n/a (medium 6.5)
- [CVE-2016-9441](https://insights.sbomify.com/CVE-2016-9441/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9440](https://insights.sbomify.com/CVE-2016-9440/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9439](https://insights.sbomify.com/CVE-2016-9439/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9438](https://insights.sbomify.com/CVE-2016-9438/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9437](https://insights.sbomify.com/CVE-2016-9437/): Memory corruption in n/a (medium 6.5)
- [CVE-2016-9436](https://insights.sbomify.com/CVE-2016-9436/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9435](https://insights.sbomify.com/CVE-2016-9435/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9434](https://insights.sbomify.com/CVE-2016-9434/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9433](https://insights.sbomify.com/CVE-2016-9433/): Memory corruption in n/a (medium 6.5)
- [CVE-2016-9432](https://insights.sbomify.com/CVE-2016-9432/): Memory corruption in n/a (medium 6.5)
- [CVE-2016-9431](https://insights.sbomify.com/CVE-2016-9431/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9430](https://insights.sbomify.com/CVE-2016-9430/): Null dereference in n/a (medium 6.5)
- [CVE-2016-9429](https://insights.sbomify.com/CVE-2016-9429/): Memory corruption in n/a (high 8.8)
- [CVE-2016-9428](https://insights.sbomify.com/CVE-2016-9428/): Memory corruption in n/a (high 8.8)
- [CVE-2016-9427](https://insights.sbomify.com/CVE-2016-9427/): Integer overflow in n/a (critical 9.8)
- [CVE-2016-9426](https://insights.sbomify.com/CVE-2016-9426/): Integer overflow in n/a (high 8.8)
- [CVE-2016-9425](https://insights.sbomify.com/CVE-2016-9425/): Memory corruption in n/a (high 8.8)
- [CVE-2016-9424](https://insights.sbomify.com/CVE-2016-9424/): Memory corruption in n/a (high 8.8)
- [CVE-2016-9423](https://insights.sbomify.com/CVE-2016-9423/): Memory corruption in n/a (high 8.8)
- [CVE-2016-9422](https://insights.sbomify.com/CVE-2016-9422/): Memory corruption in n/a (high 8.8)
- [CVE-2016-9421](https://insights.sbomify.com/CVE-2016-9421/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9420](https://insights.sbomify.com/CVE-2016-9420/): Security feature bypass in n/a (critical 9.8)
- [CVE-2016-9419](https://insights.sbomify.com/CVE-2016-9419/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9418](https://insights.sbomify.com/CVE-2016-9418/): Information disclosure in n/a (high 7.5)
- [CVE-2016-9417](https://insights.sbomify.com/CVE-2016-9417/): Server-side request forgery in n/a (high 7.4)
- [CVE-2016-9416](https://insights.sbomify.com/CVE-2016-9416/): SQL injection in n/a (critical 9.8)
- [CVE-2016-9415](https://insights.sbomify.com/CVE-2016-9415/): Path traversal in n/a (high 7.5)
- [CVE-2016-9414](https://insights.sbomify.com/CVE-2016-9414/): Information disclosure in n/a (high 7.5)
- [CVE-2016-9413](https://insights.sbomify.com/CVE-2016-9413/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2016-9412](https://insights.sbomify.com/CVE-2016-9412/): Weak cryptography in n/a (critical 9.8)
- [CVE-2016-9411](https://insights.sbomify.com/CVE-2016-9411/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-9410](https://insights.sbomify.com/CVE-2016-9410/): Information disclosure in n/a (high 7.5)
- [CVE-2016-9409](https://insights.sbomify.com/CVE-2016-9409/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9408](https://insights.sbomify.com/CVE-2016-9408/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9407](https://insights.sbomify.com/CVE-2016-9407/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9406](https://insights.sbomify.com/CVE-2016-9406/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9405](https://insights.sbomify.com/CVE-2016-9405/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9404](https://insights.sbomify.com/CVE-2016-9404/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-9403](https://insights.sbomify.com/CVE-2016-9403/): newreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to have unspecified impac (critical 9.8)
- [CVE-2016-9402](https://insights.sbomify.com/CVE-2016-9402/): SQL injection in n/a (critical 9.8)
- [CVE-2016-9401](https://insights.sbomify.com/CVE-2016-9401/): Use after free in n/a (medium 6.2)
- [CVE-2016-9400](https://insights.sbomify.com/CVE-2016-9400/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9399](https://insights.sbomify.com/CVE-2016-9399/): Denial of service in n/a (high 7.5)
- [CVE-2016-9398](https://insights.sbomify.com/CVE-2016-9398/): Denial of service in n/a (high 7.5)
- [CVE-2016-9397](https://insights.sbomify.com/CVE-2016-9397/): Denial of service in n/a (high 7.5)
- [CVE-2016-9396](https://insights.sbomify.com/CVE-2016-9396/): Denial of service in n/a (high 7.5)
- [CVE-2016-9395](https://insights.sbomify.com/CVE-2016-9395/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9394](https://insights.sbomify.com/CVE-2016-9394/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9393](https://insights.sbomify.com/CVE-2016-9393/): The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failur (medium 5.5)
- [CVE-2016-9392](https://insights.sbomify.com/CVE-2016-9392/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9391](https://insights.sbomify.com/CVE-2016-9391/): Denial of service in n/a (high 7.5)
- [CVE-2016-9390](https://insights.sbomify.com/CVE-2016-9390/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9389](https://insights.sbomify.com/CVE-2016-9389/): Denial of service in n/a (high 7.5)
- [CVE-2016-9388](https://insights.sbomify.com/CVE-2016-9388/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9387](https://insights.sbomify.com/CVE-2016-9387/): Integer overflow in n/a (high 7.8)
- [CVE-2016-9386](https://insights.sbomify.com/CVE-2016-9386/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-9385](https://insights.sbomify.com/CVE-2016-9385/): Denial of service in n/a (medium 6.0)
- [CVE-2016-9384](https://insights.sbomify.com/CVE-2016-9384/): Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table. (medium 6.5)
- [CVE-2016-9383](https://insights.sbomify.com/CVE-2016-9383/): Memory corruption in n/a (high 8.8)
- [CVE-2016-9382](https://insights.sbomify.com/CVE-2016-9382/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-9381](https://insights.sbomify.com/CVE-2016-9381/): Race condition in n/a (high 7.5)
- [CVE-2016-9380](https://insights.sbomify.com/CVE-2016-9380/): Path traversal in n/a (high 7.5)
- [CVE-2016-9379](https://insights.sbomify.com/CVE-2016-9379/): Path traversal in n/a (high 7.9)
- [CVE-2016-9378](https://insights.sbomify.com/CVE-2016-9378/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9377](https://insights.sbomify.com/CVE-2016-9377/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9376](https://insights.sbomify.com/CVE-2016-9376/): Denial of service in n/a (medium 5.9)
- [CVE-2016-9375](https://insights.sbomify.com/CVE-2016-9375/): Denial of service in n/a (medium 5.9)
- [CVE-2016-9374](https://insights.sbomify.com/CVE-2016-9374/): Denial of service in n/a (medium 5.9)
- [CVE-2016-9373](https://insights.sbomify.com/CVE-2016-9373/): Use after free in n/a (medium 5.9)
- [CVE-2016-9372](https://insights.sbomify.com/CVE-2016-9372/): Denial of service in n/a (medium 5.9)
- [CVE-2016-9371](https://insights.sbomify.com/CVE-2016-9371/): Cross-site scripting in Moxa NPort (medium 6.1)
- [CVE-2016-9369](https://insights.sbomify.com/CVE-2016-9369/): Auth bypass in Moxa NPort (critical 9.8)
- [CVE-2016-9368](https://insights.sbomify.com/CVE-2016-9368/): Missing authorization in Eaton xComfort Ethernet Communication Interface (high 7.5)
- [CVE-2016-9367](https://insights.sbomify.com/CVE-2016-9367/): Denial of service in Moxa NPort (high 7.5)
- [CVE-2016-9366](https://insights.sbomify.com/CVE-2016-9366/): Auth bypass in Moxa NPort (critical 9.8)
- [CVE-2016-9365](https://insights.sbomify.com/CVE-2016-9365/): Cross-site request forgery in Moxa NPort (high 8.8)
- [CVE-2016-9364](https://insights.sbomify.com/CVE-2016-9364/): Path traversal in Fidelix FX-20 Series Controllers prior to 11.50.19 (high 7.5)
- [CVE-2016-9363](https://insights.sbomify.com/CVE-2016-9363/): Memory corruption in Moxa NPort (high 7.3)
- [CVE-2016-9362](https://insights.sbomify.com/CVE-2016-9362/): Auth bypass in WAGO Ethernet cards (critical 9.1)
- [CVE-2016-9361](https://insights.sbomify.com/CVE-2016-9361/): Auth bypass in Moxa NPort (critical 9.8)
- [CVE-2016-9360](https://insights.sbomify.com/CVE-2016-9360/): Information disclosure in GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian (medium 6.7)
- [CVE-2016-9358](https://insights.sbomify.com/CVE-2016-9358/): Hardcoded credentials in Marel Food Processing Systems (critical 9.8)
- [CVE-2016-9357](https://insights.sbomify.com/CVE-2016-9357/): Path traversal in Eaton ePDU EoL devices (medium 5.3)
- [CVE-2016-9356](https://insights.sbomify.com/CVE-2016-9356/): Privilege escalation in Moxa DACenter 1.4 and older (high 7.8)
- [CVE-2016-9355](https://insights.sbomify.com/CVE-2016-9355/): Information disclosure in BD Alaris 8015 Insufficiently Protected Credentials Vulnerabilities (medium 5.3)
- [CVE-2016-9354](https://insights.sbomify.com/CVE-2016-9354/): Denial of service in Moxa DACenter 1.4 and older (medium 5.5)
- [CVE-2016-9353](https://insights.sbomify.com/CVE-2016-9353/): Hardcoded credentials in Advantech SUSIAccess Server 3.0 and prior (high 7.8)
- [CVE-2016-9351](https://insights.sbomify.com/CVE-2016-9351/): Path traversal in Advantech SUSIAccess Server 3.0 and prior (high 7.0)
- [CVE-2016-9349](https://insights.sbomify.com/CVE-2016-9349/): Path traversal in Advantech SUSIAccess Server 3.0 and prior (high 7.5)
- [CVE-2016-9348](https://insights.sbomify.com/CVE-2016-9348/): Information disclosure in Moxa NPort (low 3.3)
- [CVE-2016-9347](https://insights.sbomify.com/CVE-2016-9347/): Misconfiguration in Emerson DeltaV Wireless I/O Card 13.3 (medium 5.0)
- [CVE-2016-9346](https://insights.sbomify.com/CVE-2016-9346/): Information disclosure in Moxa MiiNePort (medium 5.3)
- [CVE-2016-9345](https://insights.sbomify.com/CVE-2016-9345/): Privilege escalation in Emerson DeltaV Easy Security Management through 13.3 (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/5/