Vulnerabilities published in 2016
9,398 vulnerabilities were published in 2016: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 56 of 94.
- CVE-2016-3126 Cross-site scripting in blackberry:enterprise server
- CVE-2016-3125 Weak cryptography in fedoraproject:fedora
- CVE-2016-3124 SimpleSAMLphp Information leakage issue in the sanitycheck module
- CVE-2016-3120 Null dereference in mit:kerberos 5
- CVE-2016-3119 Null dereference in mit:kerberos 5
- CVE-2016-3118 Other in broadcom:api gateway
- CVE-2016-3116 Command injection in dropbear ssh project:dropbear ssh
- CVE-2016-3115 Command injection in openbsd:openssh
- CVE-2016-3114 Missing authorization in kallithea:kallithea
- CVE-2016-3113 Cross-site scripting in redhat:ovirt-engine
- CVE-2016-3112 Misconfiguration in pulpproject:pulp
- CVE-2016-3111 Information disclosure in pulpproject:pulp
- CVE-2016-3110 mod_cluster Denial of Service vulnerability
- CVE-2016-3109 Shopware RCE Vulnerability
- CVE-2016-3108 Other in pulpproject:pulp
- CVE-2016-3107 Information disclosure in pulpproject:pulp
- CVE-2016-3106 Race condition in pulpproject:pulp
- CVE-2016-3105 Mercurial vulnerable to arbitrary code execution when converting Git repos
- CVE-2016-3104 Denial of service in mongodb:mongodb
- CVE-2016-3102 Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection
- CVE-2016-3101 Jenkins Extra Columns Plugin allows Cross-Site Scripting (XSS)
- CVE-2016-3100 Information disclosure in kde:kde frameworks
- CVE-2016-3099 Weak cryptography in redhat:enterprise linux desktop
- CVE-2016-3098 administrate vulnerable to Cross-Site Request Forgery
- CVE-2016-3097 Cross-site scripting in redhat:satellite
- CVE-2016-3096 Link Following in ansible
- CVE-2016-3095 Information disclosure in fedoraproject:fedora
- CVE-2016-3094 Improper Input Validation in org.apache.qpid:qpid-broker
- CVE-2016-3093 Denial of service in Apache Struts
- CVE-2016-3092 High severity vulnerability that affects commons-fileupload:commons-fileupload
- CVE-2016-3091 Denial of service in cloud foundry:diego
- CVE-2016-3090 Apache Struts RCE Vulnerability
- CVE-2016-3089 Apache OpenMeetings Cross-site Scripting vulnerability
- CVE-2016-3088 Apache ActiveMQ Improper Input Validation
- CVE-2016-3087 Apache Struts vulnerable to arbitrary remote code execution due to improper input validation
- CVE-2016-3086 Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
- CVE-2016-3085 Auth bypass in apache:cloudstack
- CVE-2016-3084 Cloud Foundry UAA reset password vulnerable to brute force attack
- CVE-2016-3083 org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation
- CVE-2016-3082 Remote Code Execution in Apache Struts
- CVE-2016-3081 Apache Struts Command Injection
- CVE-2016-3080 Cross-site scripting in redhat:satellite
- CVE-2016-3079 Cross-site scripting in redhat:satellite
- CVE-2016-3078 Integer overflow in php:php
- CVE-2016-3077 Memory corruption in redhat:ovirt-engine
- CVE-2016-3076 Pillow Buffer overflow in Jpeg2KEncode.c
- CVE-2016-3075 Memory corruption in canonical:ubuntu linux
- CVE-2016-3074 Integer overflow in canonical:ubuntu linux
- CVE-2016-3072 Katello SQL Injection vulnerabilities
- CVE-2016-3071 Denial of service in fedoraproject:fedora
- CVE-2016-3070 Null dereference in debian:debian linux
- CVE-2016-3069 Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository
- CVE-2016-3068 Mercurial arbitrary code execution via a crafted git ext:: URL
- CVE-2016-3067 Privilege escalation in cygwin:cygwin
- CVE-2016-3066 Information disclosure in spice-gtk project:spice-gtk
- CVE-2016-3065 Information disclosure in postgresql:postgresql
- CVE-2016-3064 Information disclosure in netapp:clustered data ontap
- CVE-2016-3063 Code injection in netapp:oncommand system manager
- CVE-2016-3062 Memory corruption in debian:debian linux
- CVE-2016-3060 Other in ibm:financial transaction manager
- CVE-2016-3059 Information disclosure in ibm:tivoli storage flashcopy manager for sql server
- CVE-2016-3057 Cross-site scripting in ibm:sterling b2b integrator
- CVE-2016-3056 Cross-site scripting in ibm:business process manager
- CVE-2016-3055 XML external entity in ibm:filenet workplace
- CVE-2016-3054 Cross-site scripting in ibm:filenet workplace
- CVE-2016-3053 Privilege escalation in AIX
- CVE-2016-3052 Information disclosure in WebSphere MQ
- CVE-2016-3051 Privilege escalation in Security Access Manager
- CVE-2016-3049 Cross-site scripting in ibm:openpages grc platform
- CVE-2016-3048 Cross-site scripting in OpenPages GRC Platform
- CVE-2016-3047 Open redirect in ibm:filenet workplace
- CVE-2016-3046 SQL injection in Access Manager
- CVE-2016-3045 Information disclosure in Access Manager
- CVE-2016-3044 Denial of service in ibm:powerkvm
- CVE-2016-3043 Misconfiguration in Access Manager
- CVE-2016-3042 Cross-site scripting in ibm:websphere application server
- CVE-2016-3040 Open redirect in ibm:security privileged identity manager virtual appliance
- CVE-2016-3039 XML external entity in ibm:traveler
- CVE-2016-3038 Cross-site scripting in Cognos TM1
- CVE-2016-3037 Information disclosure in Cognos TM1
- CVE-2016-3036 Memory corruption in Cognos TM1
- CVE-2016-3035 Information disclosure in AppScan Source
- CVE-2016-3034 Weak cryptography in AppScan Source
- CVE-2016-3033 XML external entity in ibm:appscan source
- CVE-2016-3032 Cross-site scripting in Cognos Analytics
- CVE-2016-3031 Cross-site scripting in Cognos Analytics
- CVE-2016-3029 Cross-site request forgery in Access Manager
- CVE-2016-3028 Command injection in ibm:security access manager
- CVE-2016-3027 XML external entity in Access Manager
- CVE-2016-3025 Auth bypass in ibm:security access manager
- CVE-2016-3024 Information disclosure in Access Manager
- CVE-2016-3023 Information disclosure in Access Manager
- CVE-2016-3022 Misconfiguration in Access Manager
- CVE-2016-3021 Information disclosure in Access Manager
- CVE-2016-3020 Security feature bypass in Access Manager
- CVE-2016-3019 Weak cryptography in Security Access Manager
- CVE-2016-3018 Cross-site scripting in Access Manager
- CVE-2016-3017 Misconfiguration in Access Manager
- CVE-2016-3016 Security feature bypass in Access Manager
- CVE-2016-3015 Cross-site scripting in Cognos Analytics