# Vulnerabilities published in 2016


- [CVE-2016-2881](https://insights.sbomify.com/CVE-2016-2881/): Auth bypass in ibm:qradar security information and event manager (medium 6.5)
- [CVE-2016-2880](https://insights.sbomify.com/CVE-2016-2880/): Information disclosure in QRadar SIEM (high 7.8)
- [CVE-2016-2879](https://insights.sbomify.com/CVE-2016-2879/): Weak cryptography in QRadar SIEM (high 7.8)
- [CVE-2016-2878](https://insights.sbomify.com/CVE-2016-2878/): Cross-site request forgery in ibm:qradar security information and event manager (high 8.0)
- [CVE-2016-2877](https://insights.sbomify.com/CVE-2016-2877/): Misconfiguration in ibm:qradar security information and event manager (low 3.3)
- [CVE-2016-2876](https://insights.sbomify.com/CVE-2016-2876/): Privilege escalation in ibm:qradar security information and event manager (high 7.5)
- [CVE-2016-2875](https://insights.sbomify.com/CVE-2016-2875/): Command injection in ibm:qradar security information and event manager (high 8.8)
- [CVE-2016-2874](https://insights.sbomify.com/CVE-2016-2874/): Missing authorization in ibm:qradar security information and event manager (low 3.1)
- [CVE-2016-2873](https://insights.sbomify.com/CVE-2016-2873/): SQL injection in ibm:qradar security information and event manager (high 8.8)
- [CVE-2016-2872](https://insights.sbomify.com/CVE-2016-2872/): Path traversal in ibm:qradar security information and event manager (medium 5.3)
- [CVE-2016-2871](https://insights.sbomify.com/CVE-2016-2871/): Information disclosure in ibm:qradar security information and event manager (high 7.8)
- [CVE-2016-2870](https://insights.sbomify.com/CVE-2016-2870/): Memory corruption in ibm:websphere datapower xc10 appliance firmware (low 2.7)
- [CVE-2016-2869](https://insights.sbomify.com/CVE-2016-2869/): Cross-site scripting in ibm:qradar security information and event manager (medium 5.4)
- [CVE-2016-2868](https://insights.sbomify.com/CVE-2016-2868/): XML external entity in ibm:qradar security information and event manager (low 2.7)
- [CVE-2016-2867](https://insights.sbomify.com/CVE-2016-2867/): Privilege escalation in ibm:infosphere streams (high 7.0)
- [CVE-2016-2866](https://insights.sbomify.com/CVE-2016-2866/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2016-2865](https://insights.sbomify.com/CVE-2016-2865/): Information disclosure in ibm:rational collaborative lifecycle management (medium 6.5)
- [CVE-2016-2864](https://insights.sbomify.com/CVE-2016-2864/): Cross-site scripting in ibm:rational collaborative lifecycle management (medium 5.4)
- [CVE-2016-2863](https://insights.sbomify.com/CVE-2016-2863/): Cross-site request forgery in ibm:websphere commerce (high 8.0)
- [CVE-2016-2862](https://insights.sbomify.com/CVE-2016-2862/): Cross-site scripting in ibm:websphere commerce (medium 6.1)
- [CVE-2016-2861](https://insights.sbomify.com/CVE-2016-2861/): Weak cryptography in ibm:websphere extreme scale (low 3.7)
- [CVE-2016-2860](https://insights.sbomify.com/CVE-2016-2860/): Privilege escalation in debian:debian linux (medium 6.5)
- [CVE-2016-2858](https://insights.sbomify.com/CVE-2016-2858/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2016-2857](https://insights.sbomify.com/CVE-2016-2857/): Memory corruption in canonical:ubuntu linux (high 8.4)
- [CVE-2016-2856](https://insights.sbomify.com/CVE-2016-2856/): Privilege escalation in canonical:ubuntu linux (high 8.4)
- [CVE-2016-2855](https://insights.sbomify.com/CVE-2016-2855/): Misconfiguration in huawei:mobile broadband hl service (high 7.8)
- [CVE-2016-2854](https://insights.sbomify.com/CVE-2016-2854/): Privilege escalation in linux:linux kernel (high 7.8)
- [CVE-2016-2853](https://insights.sbomify.com/CVE-2016-2853/): Privilege escalation in linux:linux kernel (high 7.8)
- [CVE-2016-2851](https://insights.sbomify.com/CVE-2016-2851/): Integer overflow in cypherpunks:libotr (critical 9.8)
- [CVE-2016-2850](https://insights.sbomify.com/CVE-2016-2850/): Security feature bypass in botan project:botan (high 7.5)
- [CVE-2016-2849](https://insights.sbomify.com/CVE-2016-2849/): Weak cryptography in botan project:botan (high 7.5)
- [CVE-2016-2848](https://insights.sbomify.com/CVE-2016-2848/): Denial of service in isc:bind (high 7.5)
- [CVE-2016-2847](https://insights.sbomify.com/CVE-2016-2847/): Denial of service in linux:linux kernel (medium 6.2)
- [CVE-2016-2846](https://insights.sbomify.com/CVE-2016-2846/): Security feature bypass in siemens:simatic s7 cpu 1200 firmware (medium 6.5)
- [CVE-2016-2845](https://insights.sbomify.com/CVE-2016-2845/): Information disclosure in google:chrome (medium 5.3)
- [CVE-2016-2844](https://insights.sbomify.com/CVE-2016-2844/): Denial of service in google:chrome (high 8.8)
- [CVE-2016-2843](https://insights.sbomify.com/CVE-2016-2843/): Other in google:chrome (critical 9.8)
- [CVE-2016-2842](https://insights.sbomify.com/CVE-2016-2842/): Memory corruption in openssl:openssl (critical 9.8)
- [CVE-2016-2841](https://insights.sbomify.com/CVE-2016-2841/): Denial of service in canonical:ubuntu linux (medium 6.0)
- [CVE-2016-2840](https://insights.sbomify.com/CVE-2016-2840/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2016-2839](https://insights.sbomify.com/CVE-2016-2839/): Denial of service in mozilla:firefox (medium 6.5)
- [CVE-2016-2838](https://insights.sbomify.com/CVE-2016-2838/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2837](https://insights.sbomify.com/CVE-2016-2837/): Memory corruption in mozilla:firefox (medium 6.3)
- [CVE-2016-2836](https://insights.sbomify.com/CVE-2016-2836/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2835](https://insights.sbomify.com/CVE-2016-2835/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2834](https://insights.sbomify.com/CVE-2016-2834/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2016-2833](https://insights.sbomify.com/CVE-2016-2833/): Security feature bypass in canonical:ubuntu linux (medium 6.1)
- [CVE-2016-2832](https://insights.sbomify.com/CVE-2016-2832/): Information disclosure in canonical:ubuntu linux (medium 4.3)
- [CVE-2016-2831](https://insights.sbomify.com/CVE-2016-2831/): Security feature bypass in canonical:ubuntu linux (high 8.8)
- [CVE-2016-2830](https://insights.sbomify.com/CVE-2016-2830/): Information disclosure in mozilla:firefox (medium 4.3)
- [CVE-2016-2829](https://insights.sbomify.com/CVE-2016-2829/): Security feature bypass in canonical:ubuntu linux (medium 6.5)
- [CVE-2016-2828](https://insights.sbomify.com/CVE-2016-2828/): Use after free in canonical:ubuntu linux (high 8.8)
- [CVE-2016-2827](https://insights.sbomify.com/CVE-2016-2827/): Memory corruption in mozilla:firefox (medium 6.5)
- [CVE-2016-2826](https://insights.sbomify.com/CVE-2016-2826/): Privilege escalation in mozilla:firefox (high 7.8)
- [CVE-2016-2825](https://insights.sbomify.com/CVE-2016-2825/): Security feature bypass in canonical:ubuntu linux (medium 6.5)
- [CVE-2016-2824](https://insights.sbomify.com/CVE-2016-2824/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2822](https://insights.sbomify.com/CVE-2016-2822/): Security feature bypass in canonical:ubuntu linux (medium 6.5)
- [CVE-2016-2821](https://insights.sbomify.com/CVE-2016-2821/): Use after free in canonical:ubuntu linux (high 7.5)
- [CVE-2016-2820](https://insights.sbomify.com/CVE-2016-2820/): Security feature bypass in mozilla:firefox (medium 4.3)
- [CVE-2016-2819](https://insights.sbomify.com/CVE-2016-2819/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2016-2818](https://insights.sbomify.com/CVE-2016-2818/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2016-2817](https://insights.sbomify.com/CVE-2016-2817/): Security feature bypass in mozilla:firefox (medium 5.4)
- [CVE-2016-2816](https://insights.sbomify.com/CVE-2016-2816/): Security feature bypass in mozilla:firefox (medium 6.5)
- [CVE-2016-2815](https://insights.sbomify.com/CVE-2016-2815/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2016-2814](https://insights.sbomify.com/CVE-2016-2814/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2813](https://insights.sbomify.com/CVE-2016-2813/): Information disclosure in mozilla:firefox (medium 6.5)
- [CVE-2016-2812](https://insights.sbomify.com/CVE-2016-2812/): Race condition in mozilla:firefox (high 7.5)
- [CVE-2016-2811](https://insights.sbomify.com/CVE-2016-2811/): Use after free in mozilla:firefox (high 8.8)
- [CVE-2016-2810](https://insights.sbomify.com/CVE-2016-2810/): Security feature bypass in mozilla:firefox (medium 5.0)
- [CVE-2016-2809](https://insights.sbomify.com/CVE-2016-2809/): Other in mozilla:firefox (medium 5.5)
- [CVE-2016-2808](https://insights.sbomify.com/CVE-2016-2808/): Memory corruption in mozilla:firefox (high 7.5)
- [CVE-2016-2807](https://insights.sbomify.com/CVE-2016-2807/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2806](https://insights.sbomify.com/CVE-2016-2806/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2016-2805](https://insights.sbomify.com/CVE-2016-2805/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2804](https://insights.sbomify.com/CVE-2016-2804/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2803](https://insights.sbomify.com/CVE-2016-2803/): Cross-site scripting in mozilla:bugzilla (medium 6.1)
- [CVE-2016-2802](https://insights.sbomify.com/CVE-2016-2802/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2801](https://insights.sbomify.com/CVE-2016-2801/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2800](https://insights.sbomify.com/CVE-2016-2800/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2799](https://insights.sbomify.com/CVE-2016-2799/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2798](https://insights.sbomify.com/CVE-2016-2798/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2797](https://insights.sbomify.com/CVE-2016-2797/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2796](https://insights.sbomify.com/CVE-2016-2796/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2795](https://insights.sbomify.com/CVE-2016-2795/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2794](https://insights.sbomify.com/CVE-2016-2794/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2793](https://insights.sbomify.com/CVE-2016-2793/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2792](https://insights.sbomify.com/CVE-2016-2792/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2791](https://insights.sbomify.com/CVE-2016-2791/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2790](https://insights.sbomify.com/CVE-2016-2790/): Memory corruption in mozilla:firefox (high 8.8)
- [CVE-2016-2789](https://insights.sbomify.com/CVE-2016-2789/): Cross-site scripting in citrix:xenmobile server (medium 6.1)
- [CVE-2016-2788](https://insights.sbomify.com/CVE-2016-2788/): Command injection in puppet:marionette collective (critical 9.8)
- [CVE-2016-2787](https://insights.sbomify.com/CVE-2016-2787/): Security feature bypass in puppet:puppet enterprise (medium 5.3)
- [CVE-2016-2786](https://insights.sbomify.com/CVE-2016-2786/): Security feature bypass in puppet:puppet agent (critical 9.8)
- [CVE-2016-2785](https://insights.sbomify.com/CVE-2016-2785/): Puppet Improper Access Control (critical 9.8)
- [CVE-2016-2784](https://insights.sbomify.com/CVE-2016-2784/): Cross-site scripting in cmsmadesimple:cms made simple (medium 4.7)
- [CVE-2016-2783](https://insights.sbomify.com/CVE-2016-2783/): Security feature bypass in avaya:vsp operating system software (critical 9.8)
- [CVE-2016-2782](https://insights.sbomify.com/CVE-2016-2782/): Null dereference in linux:linux kernel (medium 4.6)
- [CVE-2016-2781](https://insights.sbomify.com/CVE-2016-2781/): Security feature bypass in gnu:coreutils (medium 4.6)
- [CVE-2016-2780](https://insights.sbomify.com/CVE-2016-2780/): Other in huawei:utps firmware (high 7.8)
- [CVE-2016-2779](https://insights.sbomify.com/CVE-2016-2779/): Privilege escalation in kernel:util-linux (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/58/
