# Vulnerabilities published in 2016


- [CVE-2016-9344](https://insights.sbomify.com/CVE-2016-9344/): Information disclosure in Moxa MiiNePort (high 7.5)
- [CVE-2016-9343](https://insights.sbomify.com/CVE-2016-9343/): Memory corruption in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (critical 10.0)
- [CVE-2016-9339](https://insights.sbomify.com/CVE-2016-9339/): Path traversal in INTERSCHALT VDR G4e 5.220 and prior (medium 5.3)
- [CVE-2016-9338](https://insights.sbomify.com/CVE-2016-9338/): Privilege escalation in Rockwell Automation MicroLogix 1100 and 1400 (low 2.7)
- [CVE-2016-9337](https://insights.sbomify.com/CVE-2016-9337/): Command injection in Tesla Gateway ECU on Model S automobile (medium 6.8)
- [CVE-2016-9335](https://insights.sbomify.com/CVE-2016-9335/): Hardcoded credentials in STRIDE-Managed Ethernet Switch models (critical 10.0)
- [CVE-2016-9334](https://insights.sbomify.com/CVE-2016-9334/): Information disclosure in Rockwell Automation MicroLogix 1100 and 1400 (high 7.3)
- [CVE-2016-9333](https://insights.sbomify.com/CVE-2016-9333/): SQL injection in Moxa SoftCMS prior to Version 1.6 (critical 9.8)
- [CVE-2016-9332](https://insights.sbomify.com/CVE-2016-9332/): An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. (high 7.5)
- [CVE-2016-9319](https://insights.sbomify.com/CVE-2016-9319/): Security feature bypass in n/a (medium 5.9)
- [CVE-2016-9318](https://insights.sbomify.com/CVE-2016-9318/): XML external entity in n/a (medium 5.5)
- [CVE-2016-9317](https://insights.sbomify.com/CVE-2016-9317/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9316](https://insights.sbomify.com/CVE-2016-9316/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-9315](https://insights.sbomify.com/CVE-2016-9315/): Privilege escalation in n/a (high 8.8)
- [CVE-2016-9314](https://insights.sbomify.com/CVE-2016-9314/): Information disclosure in n/a (high 7.8)
- [CVE-2016-9313](https://insights.sbomify.com/CVE-2016-9313/): Null dereference in n/a (high 7.8)
- [CVE-2016-9312](https://insights.sbomify.com/CVE-2016-9312/): Denial of service in n/a (high 7.5)
- [CVE-2016-9311](https://insights.sbomify.com/CVE-2016-9311/): Null dereference in n/a (medium 5.9)
- [CVE-2016-9310](https://insights.sbomify.com/CVE-2016-9310/): Denial of service in n/a (medium 6.5)
- [CVE-2016-9307](https://insights.sbomify.com/CVE-2016-9307/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9306](https://insights.sbomify.com/CVE-2016-9306/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9305](https://insights.sbomify.com/CVE-2016-9305/): Use after free in n/a (critical 9.8)
- [CVE-2016-9304](https://insights.sbomify.com/CVE-2016-9304/): Memory corruption in n/a (high 8.8)
- [CVE-2016-9303](https://insights.sbomify.com/CVE-2016-9303/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9299](https://insights.sbomify.com/CVE-2016-9299/): Improper Neutralization of Special Elements used in an LDAP Query in Jenkins (critical 9.8)
- [CVE-2016-9298](https://insights.sbomify.com/CVE-2016-9298/): Memory corruption in n/a (medium 5.5)
- [CVE-2016-9297](https://insights.sbomify.com/CVE-2016-9297/): Denial of service in n/a (high 7.5)
- [CVE-2016-9296](https://insights.sbomify.com/CVE-2016-9296/): Null dereference in n/a (high 7.5)
- [CVE-2016-9294](https://insights.sbomify.com/CVE-2016-9294/): Null dereference in n/a (high 7.5)
- [CVE-2016-9288](https://insights.sbomify.com/CVE-2016-9288/): SQL injection in n/a (critical 9.8)
- [CVE-2016-9287](https://insights.sbomify.com/CVE-2016-9287/): SQL injection in n/a (critical 9.8)
- [CVE-2016-9286](https://insights.sbomify.com/CVE-2016-9286/): Missing authorization in n/a (medium 5.3)
- [CVE-2016-9285](https://insights.sbomify.com/CVE-2016-9285/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-9284](https://insights.sbomify.com/CVE-2016-9284/): Information disclosure in n/a (medium 5.3)
- [CVE-2016-9283](https://insights.sbomify.com/CVE-2016-9283/): SQL injection in n/a (high 7.5)
- [CVE-2016-9282](https://insights.sbomify.com/CVE-2016-9282/): SQL injection in n/a (high 7.5)
- [CVE-2016-9279](https://insights.sbomify.com/CVE-2016-9279/): Use after free in n/a (high 7.5)
- [CVE-2016-9278](https://insights.sbomify.com/CVE-2016-9278/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9277](https://insights.sbomify.com/CVE-2016-9277/): Integer overflow in n/a (high 7.5)
- [CVE-2016-9276](https://insights.sbomify.com/CVE-2016-9276/): Denial of service in n/a (high 7.5)
- [CVE-2016-9275](https://insights.sbomify.com/CVE-2016-9275/): Memory corruption in n/a (high 7.5)
- [CVE-2016-9274](https://insights.sbomify.com/CVE-2016-9274/): Privilege escalation in n/a (high 7.8)
- [CVE-2016-9273](https://insights.sbomify.com/CVE-2016-9273/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9272](https://insights.sbomify.com/CVE-2016-9272/): SQL injection in n/a (critical 9.1)
- [CVE-2016-9271](https://insights.sbomify.com/CVE-2016-9271/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-9269](https://insights.sbomify.com/CVE-2016-9269/): Command injection in n/a (critical 9.9)
- [CVE-2016-9268](https://insights.sbomify.com/CVE-2016-9268/): File upload in n/a (high 7.2)
- [CVE-2016-9266](https://insights.sbomify.com/CVE-2016-9266/): Integer overflow in n/a (medium 6.5)
- [CVE-2016-9265](https://insights.sbomify.com/CVE-2016-9265/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9264](https://insights.sbomify.com/CVE-2016-9264/): Memory corruption in n/a (medium 5.5)
- [CVE-2016-9263](https://insights.sbomify.com/CVE-2016-9263/): Cross-site scripting in n/a (medium 4.7)
- [CVE-2016-9262](https://insights.sbomify.com/CVE-2016-9262/): Integer overflow in n/a (medium 5.5)
- [CVE-2016-9261](https://insights.sbomify.com/CVE-2016-9261/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-9260](https://insights.sbomify.com/CVE-2016-9260/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-9259](https://insights.sbomify.com/CVE-2016-9259/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2016-9257](https://insights.sbomify.com/CVE-2016-9257/): Cross-site scripting in BIG-IP APM (medium 6.1)
- [CVE-2016-9256](https://insights.sbomify.com/CVE-2016-9256/): Race condition in BIG-IP (high 7.5)
- [CVE-2016-9253](https://insights.sbomify.com/CVE-2016-9253/): Denial of service in BIG-IP (high 7.5)
- [CVE-2016-9252](https://insights.sbomify.com/CVE-2016-9252/): Denial of service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WebSafe (high 7.5)
- [CVE-2016-9251](https://insights.sbomify.com/CVE-2016-9251/): Privilege escalation in BIG-IP (high 8.8)
- [CVE-2016-9250](https://insights.sbomify.com/CVE-2016-9250/): Missing authorization in BIG-IP (high 7.5)
- [CVE-2016-9249](https://insights.sbomify.com/CVE-2016-9249/): Denial of service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe (high 7.5)
- [CVE-2016-9247](https://insights.sbomify.com/CVE-2016-9247/): Denial of service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe (medium 5.9)
- [CVE-2016-9245](https://insights.sbomify.com/CVE-2016-9245/): Denial of service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe (medium 5.9)
- [CVE-2016-9244](https://insights.sbomify.com/CVE-2016-9244/): Information disclosure in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, PEM, PSM (high 7.5)
- [CVE-2016-9243](https://insights.sbomify.com/CVE-2016-9243/): Improper input validation in cryptography (high 7.5)
- [CVE-2016-9242](https://insights.sbomify.com/CVE-2016-9242/): SQL injection in n/a (high 8.8)
- [CVE-2016-9225](https://insights.sbomify.com/CVE-2016-9225/): Denial of service in all versions of the ASA CX Context-Aware Security module (high 8.6)
- [CVE-2016-9224](https://insights.sbomify.com/CVE-2016-9224/): Server-side request forgery in Cisco Jabber Guest Server 10.6(9) (medium 6.5)
- [CVE-2016-9223](https://insights.sbomify.com/CVE-2016-9223/): Misconfiguration in Cisco CloudCenter Orchestrator (critical 9.8)
- [CVE-2016-9222](https://insights.sbomify.com/CVE-2016-9222/): Cross-site scripting in Cisco NetFlow Generation Appliance 1.0(2) (medium 6.1)
- [CVE-2016-9221](https://insights.sbomify.com/CVE-2016-9221/): Denial of service in Cisco Mobility Express 2800 Series and 3800 Series Access Points (medium 4.3)
- [CVE-2016-9220](https://insights.sbomify.com/CVE-2016-9220/): Denial of service in Cisco Mobility Express 2800 and 3800 (medium 4.3)
- [CVE-2016-9219](https://insights.sbomify.com/CVE-2016-9219/): Denial of service in Cisco Wireless LAN Controller (high 7.5)
- [CVE-2016-9218](https://insights.sbomify.com/CVE-2016-9218/): Cross-site request forgery in Cisco Hybrid Meeting Server 1.0 (high 8.8)
- [CVE-2016-9217](https://insights.sbomify.com/CVE-2016-9217/): Missing authorization in Cisco Intercloud Fabric for Business and Cisco Intercloud Fabric for Providers 7.3(0)ZN(0.99) (high 8.8)
- [CVE-2016-9216](https://insights.sbomify.com/CVE-2016-9216/): Denial of service in Cisco ASR 5000 Software (medium 5.3)
- [CVE-2016-9215](https://insights.sbomify.com/CVE-2016-9215/): Privilege escalation in Cisco IOS XR (high 7.8)
- [CVE-2016-9214](https://insights.sbomify.com/CVE-2016-9214/): Cross-site scripting in Cisco Identity Services Engine (ISE) (medium 6.1)
- [CVE-2016-9212](https://insights.sbomify.com/CVE-2016-9212/): Security feature bypass in Cisco Web Security Appliance (high 7.5)
- [CVE-2016-9211](https://insights.sbomify.com/CVE-2016-9211/): Denial of service in Cisco ONS 15454 Series Multiservice Provisioning (high 7.5)
- [CVE-2016-9210](https://insights.sbomify.com/CVE-2016-9210/): Path traversal in Cisco Unified Reporting (high 7.5)
- [CVE-2016-9209](https://insights.sbomify.com/CVE-2016-9209/): Security feature bypass in Cisco FirePOWER (medium 4.3)
- [CVE-2016-9208](https://insights.sbomify.com/CVE-2016-9208/): Path traversal in Cisco Emergency Responder (medium 6.5)
- [CVE-2016-9207](https://insights.sbomify.com/CVE-2016-9207/): Server-side request forgery in Cisco Expressway (medium 6.5)
- [CVE-2016-9206](https://insights.sbomify.com/CVE-2016-9206/): Cross-site scripting in Cisco Unified Communications Manager (CUCM) (medium 6.1)
- [CVE-2016-9205](https://insights.sbomify.com/CVE-2016-9205/): Denial of service in Cisco IOS XR (high 7.5)
- [CVE-2016-9204](https://insights.sbomify.com/CVE-2016-9204/): Auth bypass in Cisco Intercloud Fabric (ICF) Director (medium 6.5)
- [CVE-2016-9203](https://insights.sbomify.com/CVE-2016-9203/): Denial of service in Cisco ASR 5000 (high 7.5)
- [CVE-2016-9202](https://insights.sbomify.com/CVE-2016-9202/): Cross-site scripting in Cisco Email Security Appliance (ESA) (medium 6.1)
- [CVE-2016-9201](https://insights.sbomify.com/CVE-2016-9201/): Security feature bypass in Cisco IOS and Cisco IOS XE (high 7.5)
- [CVE-2016-9200](https://insights.sbomify.com/CVE-2016-9200/): Cross-site scripting in Cisco Prime Collaboration Assurance (medium 6.1)
- [CVE-2016-9199](https://insights.sbomify.com/CVE-2016-9199/): Path traversal in Cisco IOx (medium 6.5)
- [CVE-2016-9198](https://insights.sbomify.com/CVE-2016-9198/): Denial of service in Cisco Identity Services Engine (ISE) (high 7.5)
- [CVE-2016-9197](https://insights.sbomify.com/CVE-2016-9197/): Privilege escalation in Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers (medium 6.7)
- [CVE-2016-9196](https://insights.sbomify.com/CVE-2016-9196/): Privilege escalation in Cisco Aironet 1800, 2800, and 3800 Series Access Point Platforms (medium 6.7)
- [CVE-2016-9195](https://insights.sbomify.com/CVE-2016-9195/): Denial of service in Cisco Wireless LAN Controller (medium 5.3)
- [CVE-2016-9194](https://insights.sbomify.com/CVE-2016-9194/): A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could (medium 6.5)
- [CVE-2016-9193](https://insights.sbomify.com/CVE-2016-9193/): Security feature bypass in Cisco FireSIGHT (high 7.5)
- [CVE-2016-9192](https://insights.sbomify.com/CVE-2016-9192/): Privilege escalation in Cisco AnyConnect Secure Mobility Client (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/6/