# Vulnerabilities published in 2016 - [CVE-2016-3810](https://insights.sbomify.com/CVE-2016-3810/): Information disclosure in google:android (medium 5.5) - [CVE-2016-3809](https://insights.sbomify.com/CVE-2016-3809/): Information disclosure in google:android (medium 5.5) - [CVE-2016-3808](https://insights.sbomify.com/CVE-2016-3808/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3807](https://insights.sbomify.com/CVE-2016-3807/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3806](https://insights.sbomify.com/CVE-2016-3806/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3805](https://insights.sbomify.com/CVE-2016-3805/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3804](https://insights.sbomify.com/CVE-2016-3804/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3803](https://insights.sbomify.com/CVE-2016-3803/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3802](https://insights.sbomify.com/CVE-2016-3802/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3801](https://insights.sbomify.com/CVE-2016-3801/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3800](https://insights.sbomify.com/CVE-2016-3800/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3799](https://insights.sbomify.com/CVE-2016-3799/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3798](https://insights.sbomify.com/CVE-2016-3798/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3797](https://insights.sbomify.com/CVE-2016-3797/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3796](https://insights.sbomify.com/CVE-2016-3796/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3795](https://insights.sbomify.com/CVE-2016-3795/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3793](https://insights.sbomify.com/CVE-2016-3793/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3792](https://insights.sbomify.com/CVE-2016-3792/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3775](https://insights.sbomify.com/CVE-2016-3775/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3774](https://insights.sbomify.com/CVE-2016-3774/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3773](https://insights.sbomify.com/CVE-2016-3773/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3772](https://insights.sbomify.com/CVE-2016-3772/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3771](https://insights.sbomify.com/CVE-2016-3771/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3770](https://insights.sbomify.com/CVE-2016-3770/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3769](https://insights.sbomify.com/CVE-2016-3769/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3768](https://insights.sbomify.com/CVE-2016-3768/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3767](https://insights.sbomify.com/CVE-2016-3767/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3766](https://insights.sbomify.com/CVE-2016-3766/): Denial of service in google:android (high 7.5) - [CVE-2016-3765](https://insights.sbomify.com/CVE-2016-3765/): Memory corruption in google:android (high 7.7) - [CVE-2016-3764](https://insights.sbomify.com/CVE-2016-3764/): Information disclosure in google:android (medium 4.0) - [CVE-2016-3763](https://insights.sbomify.com/CVE-2016-3763/): Information disclosure in google:android (low 3.3) - [CVE-2016-3762](https://insights.sbomify.com/CVE-2016-3762/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3761](https://insights.sbomify.com/CVE-2016-3761/): Information disclosure in google:android (medium 4.0) - [CVE-2016-3760](https://insights.sbomify.com/CVE-2016-3760/): Race condition in google:android (high 7.5) - [CVE-2016-3759](https://insights.sbomify.com/CVE-2016-3759/): Information disclosure in google:android (low 3.3) - [CVE-2016-3758](https://insights.sbomify.com/CVE-2016-3758/): Memory corruption in google:android (high 7.8) - [CVE-2016-3757](https://insights.sbomify.com/CVE-2016-3757/): Privilege escalation in google:android (high 7.0) - [CVE-2016-3756](https://insights.sbomify.com/CVE-2016-3756/): Denial of service in google:android (high 7.5) - [CVE-2016-3755](https://insights.sbomify.com/CVE-2016-3755/): Denial of service in google:android (high 7.5) - [CVE-2016-3754](https://insights.sbomify.com/CVE-2016-3754/): Denial of service in google:android (high 7.5) - [CVE-2016-3753](https://insights.sbomify.com/CVE-2016-3753/): Information disclosure in google:android (high 7.5) - [CVE-2016-3752](https://insights.sbomify.com/CVE-2016-3752/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3751](https://insights.sbomify.com/CVE-2016-3751/): Privilege escalation in google:android (high 7.8) - [CVE-2016-3750](https://insights.sbomify.com/CVE-2016-3750/): Security feature bypass in google:android (high 7.8) - [CVE-2016-3749](https://insights.sbomify.com/CVE-2016-3749/): Missing authorization in google:android (high 8.4) - [CVE-2016-3748](https://insights.sbomify.com/CVE-2016-3748/): Security feature bypass in google:android (high 8.4) - [CVE-2016-3747](https://insights.sbomify.com/CVE-2016-3747/): Use after free in google:android (high 7.8) - [CVE-2016-3746](https://insights.sbomify.com/CVE-2016-3746/): Use after free in google:android (high 7.8) - [CVE-2016-3745](https://insights.sbomify.com/CVE-2016-3745/): Memory corruption in google:android (critical 9.8) - [CVE-2016-3744](https://insights.sbomify.com/CVE-2016-3744/): Memory corruption in google:android (high 7.5) - [CVE-2016-3743](https://insights.sbomify.com/CVE-2016-3743/): Memory corruption in google:android (critical 9.8) - [CVE-2016-3742](https://insights.sbomify.com/CVE-2016-3742/): Memory corruption in google:android (critical 9.8) - [CVE-2016-3741](https://insights.sbomify.com/CVE-2016-3741/): Memory corruption in google:android (critical 9.8) - [CVE-2016-3740](https://insights.sbomify.com/CVE-2016-3740/): Memory corruption in foxitsoftware:foxit reader (high 7.8) - [CVE-2016-3739](https://insights.sbomify.com/CVE-2016-3739/): Security feature bypass in haxx:curl (medium 5.3) - [CVE-2016-3738](https://insights.sbomify.com/CVE-2016-3738/): Missing authorization in redhat:openshift (high 8.8) - [CVE-2016-3737](https://insights.sbomify.com/CVE-2016-3737/): Deserialization in redhat:jboss operations network (critical 9.8) - [CVE-2016-3735](https://insights.sbomify.com/CVE-2016-3735/): Weak cryptography in Piwigo (high 8.1) - [CVE-2016-3734](https://insights.sbomify.com/CVE-2016-3734/): Moodle Cross-site request forgery (CSRF) vulnerability (high 8.8) - [CVE-2016-3733](https://insights.sbomify.com/CVE-2016-3733/): Moodle Improper Access Control (medium 4.3) - [CVE-2016-3732](https://insights.sbomify.com/CVE-2016-3732/): Moodle sensitive information disclosure (medium 4.3) - [CVE-2016-3731](https://insights.sbomify.com/CVE-2016-3731/): Information disclosure in moodle:moodle (medium 5.3) - [CVE-2016-3729](https://insights.sbomify.com/CVE-2016-3729/): Moodle Improper Access Control (medium 6.5) - [CVE-2016-3728](https://insights.sbomify.com/CVE-2016-3728/): Code injection in theforeman:foreman (high 8.8) - [CVE-2016-3727](https://insights.sbomify.com/CVE-2016-3727/): Jenkins Exposes Sensitive Information via API URL (medium 4.3) - [CVE-2016-3726](https://insights.sbomify.com/CVE-2016-3726/): Jenkins affected by Open Redirect Vulnerability (high 7.4) - [CVE-2016-3725](https://insights.sbomify.com/CVE-2016-3725/): Missing permissions check in Jenkins Core (medium 4.3) - [CVE-2016-3724](https://insights.sbomify.com/CVE-2016-3724/): Jenkins Exposes Sensitive Information from Job Configuration (medium 6.5) - [CVE-2016-3723](https://insights.sbomify.com/CVE-2016-3723/): Exposure of Sensitive Information in Jenkins Core (medium 4.3) - [CVE-2016-3722](https://insights.sbomify.com/CVE-2016-3722/): Incorrect Authorization in Jenkins Core (medium 4.3) - [CVE-2016-3721](https://insights.sbomify.com/CVE-2016-3721/): Jenkins allows Remote Users to Inject Build Parameters (medium 4.3) - [CVE-2016-3720](https://insights.sbomify.com/CVE-2016-3720/): jackson-dataformat-xml vulnerable to XML external entity (XXE) (critical 9.8) - [CVE-2016-3718](https://insights.sbomify.com/CVE-2016-3718/): ImageMagick Server-Side Request Forgery (SSRF) (medium 5.5, exploited in the wild) - [CVE-2016-3717](https://insights.sbomify.com/CVE-2016-3717/): Information disclosure in canonical:ubuntu linux (medium 5.5) - [CVE-2016-3716](https://insights.sbomify.com/CVE-2016-3716/): Path traversal in canonical:ubuntu linux (low 3.3) - [CVE-2016-3715](https://insights.sbomify.com/CVE-2016-3715/): ImageMagick Arbitrary File Deletion (medium 5.5, exploited in the wild) - [CVE-2016-3714](https://insights.sbomify.com/CVE-2016-3714/): ImageMagick Improper Input Validation (high 8.4, exploited in the wild) - [CVE-2016-3713](https://insights.sbomify.com/CVE-2016-3713/): Privilege escalation in linux:linux kernel (high 7.1) - [CVE-2016-3712](https://insights.sbomify.com/CVE-2016-3712/): Integer overflow in canonical:ubuntu linux (medium 5.5) - [CVE-2016-3711](https://insights.sbomify.com/CVE-2016-3711/): Information disclosure in redhat:openshift (low 3.3) - [CVE-2016-3710](https://insights.sbomify.com/CVE-2016-3710/): Memory corruption in canonical:ubuntu linux (high 8.8) - [CVE-2016-3709](https://insights.sbomify.com/CVE-2016-3709/): Cross-site scripting in libxml2 (medium 6.1) - [CVE-2016-3708](https://insights.sbomify.com/CVE-2016-3708/): Security feature bypass in redhat:openshift (high 7.1) - [CVE-2016-3707](https://insights.sbomify.com/CVE-2016-3707/): Security feature bypass in linux:linux kernel-rt (high 8.1) - [CVE-2016-3706](https://insights.sbomify.com/CVE-2016-3706/): Memory corruption in gnu:glibc (high 7.5) - [CVE-2016-3705](https://insights.sbomify.com/CVE-2016-3705/): Denial of service in canonical:ubuntu linux (high 7.5) - [CVE-2016-3704](https://insights.sbomify.com/CVE-2016-3704/): Weak cryptography in fedoraproject:fedora (high 7.5) - [CVE-2016-3703](https://insights.sbomify.com/CVE-2016-3703/): Information disclosure in redhat:openshift (medium 5.3) - [CVE-2016-3702](https://insights.sbomify.com/CVE-2016-3702/): Weak cryptography in redhat:cloudforms management engine (medium 5.3) - [CVE-2016-3699](https://insights.sbomify.com/CVE-2016-3699/): Security feature bypass in linux:linux kernel (high 7.4) - [CVE-2016-3698](https://insights.sbomify.com/CVE-2016-3698/): Security feature bypass in canonical:ubuntu linux (high 8.1) - [CVE-2016-3697](https://insights.sbomify.com/CVE-2016-3697/): Privilege Elevation in runc (high 7.8) - [CVE-2016-3696](https://insights.sbomify.com/CVE-2016-3696/): Information disclosure in fedoraproject:fedora (medium 5.5) - [CVE-2016-3695](https://insights.sbomify.com/CVE-2016-3695/): Denial of service in linux:linux kernel (medium 5.5) - [CVE-2016-3694](https://insights.sbomify.com/CVE-2016-3694/): SQL injection in modified:ecommerce shopsoftware (critical 9.8) - [CVE-2016-3693](https://insights.sbomify.com/CVE-2016-3693/): safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method (high 8.1) - [CVE-2016-3691](https://insights.sbomify.com/CVE-2016-3691/): Kallithea Routes CSRF Bypass (high 8.8) - [CVE-2016-3690](https://insights.sbomify.com/CVE-2016-3690/): Deserialization in redhat:jboss enterprise application platform (critical 9.8) - [CVE-2016-3689](https://insights.sbomify.com/CVE-2016-3689/): Denial of service in canonical:ubuntu linux (medium 4.6) - [CVE-2016-3688](https://insights.sbomify.com/CVE-2016-3688/): SQL injection in dotcms:dotcms (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2016/page/50/