# Vulnerabilities published in 2016 - [CVE-2016-3126](https://insights.sbomify.com/CVE-2016-3126/): Cross-site scripting in blackberry:enterprise server (medium 6.1) - [CVE-2016-3125](https://insights.sbomify.com/CVE-2016-3125/): Weak cryptography in fedoraproject:fedora (high 7.5) - [CVE-2016-3124](https://insights.sbomify.com/CVE-2016-3124/): SimpleSAMLphp Information leakage issue in the sanitycheck module (medium 5.3) - [CVE-2016-3120](https://insights.sbomify.com/CVE-2016-3120/): Null dereference in mit:kerberos 5 (medium 6.5) - [CVE-2016-3119](https://insights.sbomify.com/CVE-2016-3119/): Null dereference in mit:kerberos 5 (medium 5.3) - [CVE-2016-3118](https://insights.sbomify.com/CVE-2016-3118/): Other in broadcom:api gateway (medium 6.5) - [CVE-2016-3116](https://insights.sbomify.com/CVE-2016-3116/): Command injection in dropbear ssh project:dropbear ssh (medium 6.4) - [CVE-2016-3115](https://insights.sbomify.com/CVE-2016-3115/): Command injection in openbsd:openssh (medium 6.4) - [CVE-2016-3114](https://insights.sbomify.com/CVE-2016-3114/): Missing authorization in kallithea:kallithea (medium 6.5) - [CVE-2016-3113](https://insights.sbomify.com/CVE-2016-3113/): Cross-site scripting in redhat:ovirt-engine (medium 6.1) - [CVE-2016-3112](https://insights.sbomify.com/CVE-2016-3112/): Misconfiguration in pulpproject:pulp (high 7.5) - [CVE-2016-3111](https://insights.sbomify.com/CVE-2016-3111/): Information disclosure in pulpproject:pulp (medium 5.5) - [CVE-2016-3110](https://insights.sbomify.com/CVE-2016-3110/): mod_cluster Denial of Service vulnerability (high 7.5) - [CVE-2016-3109](https://insights.sbomify.com/CVE-2016-3109/): Shopware RCE Vulnerability (critical 9.8) - [CVE-2016-3108](https://insights.sbomify.com/CVE-2016-3108/): Other in pulpproject:pulp (high 7.1) - [CVE-2016-3107](https://insights.sbomify.com/CVE-2016-3107/): Information disclosure in pulpproject:pulp (medium 5.5) - [CVE-2016-3106](https://insights.sbomify.com/CVE-2016-3106/): Race condition in pulpproject:pulp (medium 5.3) - [CVE-2016-3105](https://insights.sbomify.com/CVE-2016-3105/): Mercurial vulnerable to arbitrary code execution when converting Git repos (high 8.8) - [CVE-2016-3104](https://insights.sbomify.com/CVE-2016-3104/): Denial of service in mongodb:mongodb (high 7.5) - [CVE-2016-3102](https://insights.sbomify.com/CVE-2016-3102/): Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection (high 7.3) - [CVE-2016-3101](https://insights.sbomify.com/CVE-2016-3101/): Jenkins Extra Columns Plugin allows Cross-Site Scripting (XSS) (medium 5.4) - [CVE-2016-3100](https://insights.sbomify.com/CVE-2016-3100/): Information disclosure in kde:kde frameworks (high 8.4) - [CVE-2016-3099](https://insights.sbomify.com/CVE-2016-3099/): Weak cryptography in redhat:enterprise linux desktop (high 7.5) - [CVE-2016-3098](https://insights.sbomify.com/CVE-2016-3098/): administrate vulnerable to Cross-Site Request Forgery (medium 5.4) - [CVE-2016-3097](https://insights.sbomify.com/CVE-2016-3097/): Cross-site scripting in redhat:satellite (medium 6.1) - [CVE-2016-3096](https://insights.sbomify.com/CVE-2016-3096/): Link Following in ansible (high 7.8) - [CVE-2016-3095](https://insights.sbomify.com/CVE-2016-3095/): Information disclosure in fedoraproject:fedora (medium 5.5) - [CVE-2016-3094](https://insights.sbomify.com/CVE-2016-3094/): Improper Input Validation in org.apache.qpid:qpid-broker (medium 5.9) - [CVE-2016-3093](https://insights.sbomify.com/CVE-2016-3093/): Denial of service in Apache Struts (medium 5.3) - [CVE-2016-3092](https://insights.sbomify.com/CVE-2016-3092/): High severity vulnerability that affects commons-fileupload:commons-fileupload (high 7.5) - [CVE-2016-3091](https://insights.sbomify.com/CVE-2016-3091/): Denial of service in cloud foundry:diego (high 7.5) - [CVE-2016-3090](https://insights.sbomify.com/CVE-2016-3090/): Apache Struts RCE Vulnerability (high 8.8) - [CVE-2016-3089](https://insights.sbomify.com/CVE-2016-3089/): Apache OpenMeetings Cross-site Scripting vulnerability (medium 6.1) - [CVE-2016-3088](https://insights.sbomify.com/CVE-2016-3088/): Apache ActiveMQ Improper Input Validation (critical 9.8, exploited in the wild) - [CVE-2016-3087](https://insights.sbomify.com/CVE-2016-3087/): Apache Struts vulnerable to arbitrary remote code execution due to improper input validation (critical 9.8) - [CVE-2016-3086](https://insights.sbomify.com/CVE-2016-3086/): Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop (critical 9.8) - [CVE-2016-3085](https://insights.sbomify.com/CVE-2016-3085/): Auth bypass in apache:cloudstack (medium 6.5) - [CVE-2016-3084](https://insights.sbomify.com/CVE-2016-3084/): Cloud Foundry UAA reset password vulnerable to brute force attack (high 8.1) - [CVE-2016-3083](https://insights.sbomify.com/CVE-2016-3083/): org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation (high 7.5) - [CVE-2016-3082](https://insights.sbomify.com/CVE-2016-3082/): Remote Code Execution in Apache Struts (critical 9.8) - [CVE-2016-3081](https://insights.sbomify.com/CVE-2016-3081/): Apache Struts Command Injection (high 8.1, exploited in the wild) - [CVE-2016-3080](https://insights.sbomify.com/CVE-2016-3080/): Cross-site scripting in redhat:satellite (medium 6.1) - [CVE-2016-3079](https://insights.sbomify.com/CVE-2016-3079/): Cross-site scripting in redhat:satellite (medium 6.1) - [CVE-2016-3078](https://insights.sbomify.com/CVE-2016-3078/): Integer overflow in php:php (critical 9.8) - [CVE-2016-3077](https://insights.sbomify.com/CVE-2016-3077/): Memory corruption in redhat:ovirt-engine (medium 6.5) - [CVE-2016-3076](https://insights.sbomify.com/CVE-2016-3076/): Pillow Buffer overflow in Jpeg2KEncode.c (medium 5.5) - [CVE-2016-3075](https://insights.sbomify.com/CVE-2016-3075/): Memory corruption in canonical:ubuntu linux (high 7.5) - [CVE-2016-3074](https://insights.sbomify.com/CVE-2016-3074/): Integer overflow in canonical:ubuntu linux (critical 9.8) - [CVE-2016-3072](https://insights.sbomify.com/CVE-2016-3072/): Katello SQL Injection vulnerabilities (high 8.8) - [CVE-2016-3071](https://insights.sbomify.com/CVE-2016-3071/): Denial of service in fedoraproject:fedora (high 7.5) - [CVE-2016-3070](https://insights.sbomify.com/CVE-2016-3070/): Null dereference in debian:debian linux (high 7.8) - [CVE-2016-3069](https://insights.sbomify.com/CVE-2016-3069/): Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository (high 8.8) - [CVE-2016-3068](https://insights.sbomify.com/CVE-2016-3068/): Mercurial arbitrary code execution via a crafted git ext:: URL (high 8.8) - [CVE-2016-3067](https://insights.sbomify.com/CVE-2016-3067/): Privilege escalation in cygwin:cygwin (critical 9.8) - [CVE-2016-3066](https://insights.sbomify.com/CVE-2016-3066/): Information disclosure in spice-gtk project:spice-gtk (medium 6.5) - [CVE-2016-3065](https://insights.sbomify.com/CVE-2016-3065/): Information disclosure in postgresql:postgresql (critical 9.1) - [CVE-2016-3064](https://insights.sbomify.com/CVE-2016-3064/): Information disclosure in netapp:clustered data ontap (medium 6.5) - [CVE-2016-3063](https://insights.sbomify.com/CVE-2016-3063/): Code injection in netapp:oncommand system manager (high 7.5) - [CVE-2016-3062](https://insights.sbomify.com/CVE-2016-3062/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2016-3060](https://insights.sbomify.com/CVE-2016-3060/): Other in ibm:financial transaction manager (medium 5.7) - [CVE-2016-3059](https://insights.sbomify.com/CVE-2016-3059/): Information disclosure in ibm:tivoli storage flashcopy manager for sql server (medium 6.2) - [CVE-2016-3057](https://insights.sbomify.com/CVE-2016-3057/): Cross-site scripting in ibm:sterling b2b integrator (medium 6.1) - [CVE-2016-3056](https://insights.sbomify.com/CVE-2016-3056/): Cross-site scripting in ibm:business process manager (medium 5.4) - [CVE-2016-3055](https://insights.sbomify.com/CVE-2016-3055/): XML external entity in ibm:filenet workplace (high 8.1) - [CVE-2016-3054](https://insights.sbomify.com/CVE-2016-3054/): Cross-site scripting in ibm:filenet workplace (medium 5.4) - [CVE-2016-3053](https://insights.sbomify.com/CVE-2016-3053/): Privilege escalation in AIX (high 7.8) - [CVE-2016-3052](https://insights.sbomify.com/CVE-2016-3052/): Information disclosure in WebSphere MQ (medium 5.9) - [CVE-2016-3051](https://insights.sbomify.com/CVE-2016-3051/): Privilege escalation in Security Access Manager (medium 4.3) - [CVE-2016-3049](https://insights.sbomify.com/CVE-2016-3049/): Cross-site scripting in ibm:openpages grc platform (medium 5.4) - [CVE-2016-3048](https://insights.sbomify.com/CVE-2016-3048/): Cross-site scripting in OpenPages GRC Platform (medium 5.4) - [CVE-2016-3047](https://insights.sbomify.com/CVE-2016-3047/): Open redirect in ibm:filenet workplace (medium 6.8) - [CVE-2016-3046](https://insights.sbomify.com/CVE-2016-3046/): SQL injection in Access Manager (low 2.7) - [CVE-2016-3045](https://insights.sbomify.com/CVE-2016-3045/): Information disclosure in Access Manager (low 3.7) - [CVE-2016-3044](https://insights.sbomify.com/CVE-2016-3044/): Denial of service in ibm:powerkvm (medium 6.5) - [CVE-2016-3043](https://insights.sbomify.com/CVE-2016-3043/): Misconfiguration in Access Manager (medium 5.9) - [CVE-2016-3042](https://insights.sbomify.com/CVE-2016-3042/): Cross-site scripting in ibm:websphere application server (medium 5.4) - [CVE-2016-3040](https://insights.sbomify.com/CVE-2016-3040/): Open redirect in ibm:security privileged identity manager virtual appliance (medium 6.8) - [CVE-2016-3039](https://insights.sbomify.com/CVE-2016-3039/): XML external entity in ibm:traveler (high 8.1) - [CVE-2016-3038](https://insights.sbomify.com/CVE-2016-3038/): Cross-site scripting in Cognos TM1 (medium 5.4) - [CVE-2016-3037](https://insights.sbomify.com/CVE-2016-3037/): Information disclosure in Cognos TM1 (medium 5.7) - [CVE-2016-3036](https://insights.sbomify.com/CVE-2016-3036/): Memory corruption in Cognos TM1 (high 7.5) - [CVE-2016-3035](https://insights.sbomify.com/CVE-2016-3035/): Information disclosure in AppScan Source (medium 5.3) - [CVE-2016-3034](https://insights.sbomify.com/CVE-2016-3034/): Weak cryptography in AppScan Source (medium 4.4) - [CVE-2016-3033](https://insights.sbomify.com/CVE-2016-3033/): XML external entity in ibm:appscan source (high 8.1) - [CVE-2016-3032](https://insights.sbomify.com/CVE-2016-3032/): Cross-site scripting in Cognos Analytics (medium 5.4) - [CVE-2016-3031](https://insights.sbomify.com/CVE-2016-3031/): Cross-site scripting in Cognos Analytics (medium 5.4) - [CVE-2016-3029](https://insights.sbomify.com/CVE-2016-3029/): Cross-site request forgery in Access Manager (high 8.8) - [CVE-2016-3028](https://insights.sbomify.com/CVE-2016-3028/): Command injection in ibm:security access manager (critical 9.1) - [CVE-2016-3027](https://insights.sbomify.com/CVE-2016-3027/): XML external entity in Access Manager (medium 6.5) - [CVE-2016-3025](https://insights.sbomify.com/CVE-2016-3025/): Auth bypass in ibm:security access manager (high 8.1) - [CVE-2016-3024](https://insights.sbomify.com/CVE-2016-3024/): Information disclosure in Access Manager (medium 4.0) - [CVE-2016-3023](https://insights.sbomify.com/CVE-2016-3023/): Information disclosure in Access Manager (medium 5.3) - [CVE-2016-3022](https://insights.sbomify.com/CVE-2016-3022/): Misconfiguration in Access Manager (medium 6.5) - [CVE-2016-3021](https://insights.sbomify.com/CVE-2016-3021/): Information disclosure in Access Manager (low 2.7) - [CVE-2016-3020](https://insights.sbomify.com/CVE-2016-3020/): Security feature bypass in Access Manager (medium 5.5) - [CVE-2016-3019](https://insights.sbomify.com/CVE-2016-3019/): Weak cryptography in Security Access Manager (medium 6.5) - [CVE-2016-3018](https://insights.sbomify.com/CVE-2016-3018/): Cross-site scripting in Access Manager (medium 6.1) - [CVE-2016-3017](https://insights.sbomify.com/CVE-2016-3017/): Misconfiguration in Access Manager (high 7.5) - [CVE-2016-3016](https://insights.sbomify.com/CVE-2016-3016/): Security feature bypass in Access Manager (medium 4.4) - [CVE-2016-3015](https://insights.sbomify.com/CVE-2016-3015/): Cross-site scripting in Cognos Analytics (medium 5.4) --- From sbomify Insights: https://insights.sbomify.com/years/2016/page/56/