# Vulnerabilities published in 2016


- [CVE-2016-3240](https://insights.sbomify.com/CVE-2016-3240/): Memory corruption in microsoft:internet explorer (high 7.5)
- [CVE-2016-3239](https://insights.sbomify.com/CVE-2016-3239/): Privilege escalation in microsoft:windows 10 (high 7.8)
- [CVE-2016-3238](https://insights.sbomify.com/CVE-2016-3238/): Code injection in microsoft:windows 10 (high 8.1)
- [CVE-2016-3237](https://insights.sbomify.com/CVE-2016-3237/): Auth bypass in microsoft:windows 10 (high 7.5)
- [CVE-2016-3236](https://insights.sbomify.com/CVE-2016-3236/): Other in microsoft:windows 10 (critical 9.8)
- [CVE-2016-3235](https://insights.sbomify.com/CVE-2016-3235/): Microsoft Office OLE DLL Side Loading (high 7.8, exploited in the wild)
- [CVE-2016-3234](https://insights.sbomify.com/CVE-2016-3234/): Information disclosure in microsoft:office (medium 5.5)
- [CVE-2016-3233](https://insights.sbomify.com/CVE-2016-3233/): Memory corruption in microsoft:excel (high 7.3)
- [CVE-2016-3232](https://insights.sbomify.com/CVE-2016-3232/): Information disclosure in microsoft:windows server 2012 (medium 5.0)
- [CVE-2016-3231](https://insights.sbomify.com/CVE-2016-3231/): Privilege escalation in microsoft:windows diagnostics hub (high 7.8)
- [CVE-2016-3230](https://insights.sbomify.com/CVE-2016-3230/): Denial of service in microsoft:windows 10 (medium 5.0)
- [CVE-2016-3228](https://insights.sbomify.com/CVE-2016-3228/): Memory corruption in microsoft:windows server 2008 (high 8.8)
- [CVE-2016-3227](https://insights.sbomify.com/CVE-2016-3227/): Use after free in microsoft:windows server 2012 (critical 9.8)
- [CVE-2016-3226](https://insights.sbomify.com/CVE-2016-3226/): Denial of service in microsoft:windows server 2008 (medium 6.5)
- [CVE-2016-3225](https://insights.sbomify.com/CVE-2016-3225/): Privilege escalation in microsoft:windows 10 (high 7.8)
- [CVE-2016-3223](https://insights.sbomify.com/CVE-2016-3223/): Privilege escalation in microsoft:windows 10 (high 8.1)
- [CVE-2016-3222](https://insights.sbomify.com/CVE-2016-3222/): Memory corruption in microsoft:edge (high 8.8)
- [CVE-2016-3221](https://insights.sbomify.com/CVE-2016-3221/): Privilege escalation in microsoft:windows 10 (high 7.8)
- [CVE-2016-3220](https://insights.sbomify.com/CVE-2016-3220/): Privilege escalation in microsoft:windows 10 (high 7.8)
- [CVE-2016-3219](https://insights.sbomify.com/CVE-2016-3219/): Privilege escalation in microsoft:windows 10 (high 7.8)
- [CVE-2016-3218](https://insights.sbomify.com/CVE-2016-3218/): Privilege escalation in microsoft:windows 10 (high 7.8)
- [CVE-2016-3216](https://insights.sbomify.com/CVE-2016-3216/): Information disclosure in microsoft:windows 10 (medium 4.3)
- [CVE-2016-3215](https://insights.sbomify.com/CVE-2016-3215/): Information disclosure in microsoft:edge (medium 5.5)
- [CVE-2016-3214](https://insights.sbomify.com/CVE-2016-3214/): ChakraCore RCE Vulnerability (high 8.8)
- [CVE-2016-3213](https://insights.sbomify.com/CVE-2016-3213/): Privilege escalation in microsoft:internet explorer (high 8.8)
- [CVE-2016-3212](https://insights.sbomify.com/CVE-2016-3212/): Cross-site scripting in microsoft:internet explorer (medium 6.1)
- [CVE-2016-3211](https://insights.sbomify.com/CVE-2016-3211/): Memory corruption in microsoft:internet explorer (high 8.8)
- [CVE-2016-3210](https://insights.sbomify.com/CVE-2016-3210/): Memory corruption in microsoft:internet explorer (high 8.8)
- [CVE-2016-3209](https://insights.sbomify.com/CVE-2016-3209/): Information disclosure in microsoft:.net framework (medium 5.5)
- [CVE-2016-3207](https://insights.sbomify.com/CVE-2016-3207/): Memory corruption in microsoft:jscript (high 7.5)
- [CVE-2016-3206](https://insights.sbomify.com/CVE-2016-3206/): Memory corruption in microsoft:jscript (high 7.5)
- [CVE-2016-3205](https://insights.sbomify.com/CVE-2016-3205/): Memory corruption in microsoft:jscript (high 7.5)
- [CVE-2016-3204](https://insights.sbomify.com/CVE-2016-3204/): Memory corruption in microsoft:internet explorer (high 8.8)
- [CVE-2016-3203](https://insights.sbomify.com/CVE-2016-3203/): Other in microsoft:edge (high 7.8)
- [CVE-2016-3202](https://insights.sbomify.com/CVE-2016-3202/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2016-3201](https://insights.sbomify.com/CVE-2016-3201/): Information disclosure in microsoft:edge (medium 6.5)
- [CVE-2016-3199](https://insights.sbomify.com/CVE-2016-3199/): ChakraCore RCE Vulnerability (high 8.8)
- [CVE-2016-3198](https://insights.sbomify.com/CVE-2016-3198/): Security feature bypass in microsoft:edge (medium 6.5)
- [CVE-2016-3196](https://insights.sbomify.com/CVE-2016-3196/): Cross-site scripting in fortinet:fortianalyzer firmware (medium 5.4)
- [CVE-2016-3195](https://insights.sbomify.com/CVE-2016-3195/): Cross-site scripting in fortinet:fortianalyzer firmware (medium 6.1)
- [CVE-2016-3194](https://insights.sbomify.com/CVE-2016-3194/): Cross-site scripting in fortinet:fortianalyzer firmware (medium 6.1)
- [CVE-2016-3193](https://insights.sbomify.com/CVE-2016-3193/): Cross-site scripting in fortinet:fortianalyzer firmware (medium 5.4)
- [CVE-2016-3192](https://insights.sbomify.com/CVE-2016-3192/): Information disclosure in cloudera:cloudera manager (medium 6.5)
- [CVE-2016-3191](https://insights.sbomify.com/CVE-2016-3191/): Memory corruption in pcre:pcre (critical 9.8)
- [CVE-2016-3190](https://insights.sbomify.com/CVE-2016-3190/): Memory corruption in cairographics:cairo (high 7.5)
- [CVE-2016-3189](https://insights.sbomify.com/CVE-2016-3189/): Use after free in bzip:bzip2 (medium 6.5)
- [CVE-2016-3188](https://insights.sbomify.com/CVE-2016-3188/): Missing authorization in prepopulate project:prepopulate (high 7.3)
- [CVE-2016-3187](https://insights.sbomify.com/CVE-2016-3187/): Other in prepopulate project:prepopulate (high 7.3)
- [CVE-2016-3186](https://insights.sbomify.com/CVE-2016-3186/): Memory corruption in libtiff:libtiff (medium 6.2)
- [CVE-2016-3185](https://insights.sbomify.com/CVE-2016-3185/): Memory corruption in php:php (high 7.1)
- [CVE-2016-3183](https://insights.sbomify.com/CVE-2016-3183/): Memory corruption in uclouvain:openjpeg (medium 5.5)
- [CVE-2016-3182](https://insights.sbomify.com/CVE-2016-3182/): Memory corruption in uclouvain:openjpeg (medium 5.5)
- [CVE-2016-3180](https://insights.sbomify.com/CVE-2016-3180/): Security feature bypass in tor browser launcher project:tor browser launcher (high 8.1)
- [CVE-2016-3179](https://insights.sbomify.com/CVE-2016-3179/): Use after free in miniupnp project:minissdpd (medium 5.5)
- [CVE-2016-3178](https://insights.sbomify.com/CVE-2016-3178/): Memory corruption in miniupnp project:minissdpd (medium 5.5)
- [CVE-2016-3177](https://insights.sbomify.com/CVE-2016-3177/): Use after free in giflib project:giflib (critical 9.8)
- [CVE-2016-3176](https://insights.sbomify.com/CVE-2016-3176/): Salt Insecure configuration of PAM external authentication service (medium 5.6)
- [CVE-2016-3174](https://insights.sbomify.com/CVE-2016-3174/): Open redirect in open-xchange:open-xchange appsuite (high 7.4)
- [CVE-2016-3173](https://insights.sbomify.com/CVE-2016-3173/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 5.4)
- [CVE-2016-3172](https://insights.sbomify.com/CVE-2016-3172/): SQL injection in cacti:cacti (high 8.8)
- [CVE-2016-3171](https://insights.sbomify.com/CVE-2016-3171/): Drupal arbitrary code execution (high 8.1)
- [CVE-2016-3170](https://insights.sbomify.com/CVE-2016-3170/): Drupal sensitive information disclosure (medium 5.3)
- [CVE-2016-3169](https://insights.sbomify.com/CVE-2016-3169/): Drupal saving user accounts can sometimes grant the user all roles (high 8.1)
- [CVE-2016-3168](https://insights.sbomify.com/CVE-2016-3168/): Drupal Reflected file download vulnerability (medium 6.4)
- [CVE-2016-3167](https://insights.sbomify.com/CVE-2016-3167/): Drupal Open redirect vulnerability in the drupal_goto function (high 7.4)
- [CVE-2016-3166](https://insights.sbomify.com/CVE-2016-3166/): Drupal CRLF injection vulnerability in the drupal_set_header function (medium 5.9)
- [CVE-2016-3165](https://insights.sbomify.com/CVE-2016-3165/): Drupal Form API ignores access restrictions on submit buttons (high 7.5)
- [CVE-2016-3164](https://insights.sbomify.com/CVE-2016-3164/): Drupal Open Redirect (high 7.4)
- [CVE-2016-3163](https://insights.sbomify.com/CVE-2016-3163/): Drupal Brute force amplification attacks via XML-RPC (high 7.5)
- [CVE-2016-3162](https://insights.sbomify.com/CVE-2016-3162/): Drupal File upload access bypass and denial of service (high 8.1)
- [CVE-2016-3161](https://insights.sbomify.com/CVE-2016-3161/): Privilege escalation in Quadro, NVS, GeForce (all versions) (high 7.8)
- [CVE-2016-3159](https://insights.sbomify.com/CVE-2016-3159/): Information disclosure in debian:debian linux (low 3.8)
- [CVE-2016-3158](https://insights.sbomify.com/CVE-2016-3158/): Information disclosure in fedoraproject:fedora (low 3.8)
- [CVE-2016-3157](https://insights.sbomify.com/CVE-2016-3157/): Privilege escalation in canonical:ubuntu linux (high 7.8)
- [CVE-2016-3156](https://insights.sbomify.com/CVE-2016-3156/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2016-3155](https://insights.sbomify.com/CVE-2016-3155/): Misconfiguration in siemens:apogee insight (low 3.4)
- [CVE-2016-3154](https://insights.sbomify.com/CVE-2016-3154/): Deserialization in spip:spip (critical 9.8)
- [CVE-2016-3153](https://insights.sbomify.com/CVE-2016-3153/): Code injection in debian:debian linux (critical 9.8)
- [CVE-2016-3152](https://insights.sbomify.com/CVE-2016-3152/): Information disclosure in barco:clickshare csc-1 firmware (critical 9.8)
- [CVE-2016-3151](https://insights.sbomify.com/CVE-2016-3151/): Path traversal in barco:clickshare csc-1 firmware (high 7.5)
- [CVE-2016-3150](https://insights.sbomify.com/CVE-2016-3150/): Cross-site scripting in barco:clickshare csc-1 firmware (medium 6.1)
- [CVE-2016-3149](https://insights.sbomify.com/CVE-2016-3149/): Other in barco:clickshare csc-1 firmware (critical 9.8)
- [CVE-2016-3147](https://insights.sbomify.com/CVE-2016-3147/): Memory corruption in ivanti:landesk management suite (critical 9.8)
- [CVE-2016-3145](https://insights.sbomify.com/CVE-2016-3145/): Information disclosure in lexmark:printer firmware (medium 4.6)
- [CVE-2016-3144](https://insights.sbomify.com/CVE-2016-3144/): Cross-site scripting in fedoraproject:fedora (medium 5.4)
- [CVE-2016-3142](https://insights.sbomify.com/CVE-2016-3142/): Memory corruption in apple:mac os x (high 8.2)
- [CVE-2016-3141](https://insights.sbomify.com/CVE-2016-3141/): Use after free in apple:mac os x (critical 9.8)
- [CVE-2016-3140](https://insights.sbomify.com/CVE-2016-3140/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2016-3139](https://insights.sbomify.com/CVE-2016-3139/): Null dereference in linux:linux kernel (medium 4.6)
- [CVE-2016-3138](https://insights.sbomify.com/CVE-2016-3138/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2016-3137](https://insights.sbomify.com/CVE-2016-3137/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2016-3136](https://insights.sbomify.com/CVE-2016-3136/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2016-3135](https://insights.sbomify.com/CVE-2016-3135/): Integer overflow in canonical:ubuntu linux (high 7.8)
- [CVE-2016-3134](https://insights.sbomify.com/CVE-2016-3134/): Memory corruption in linux:linux kernel (high 8.4)
- [CVE-2016-3132](https://insights.sbomify.com/CVE-2016-3132/): Memory corruption in php:php (critical 9.8)
- [CVE-2016-3131](https://insights.sbomify.com/CVE-2016-3131/): Missing authorization in cloudera:cdh (medium 6.5)
- [CVE-2016-3130](https://insights.sbomify.com/CVE-2016-3130/): Information disclosure in BES12 versions through 12.5.2 (high 8.1)
- [CVE-2016-3129](https://insights.sbomify.com/CVE-2016-3129/): Command injection in BlackBerry GEMS versions 2.1.5.3 to 2.2.22.25 (medium 6.6)
- [CVE-2016-3128](https://insights.sbomify.com/CVE-2016-3128/): Auth bypass in BES12 versions through 12.5.2 (high 8.2)
- [CVE-2016-3127](https://insights.sbomify.com/CVE-2016-3127/): Information disclosure in BlackBerry Good Control Server versions earlier than 2.3.53.62 (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/55/