# Vulnerabilities published in 2016 - [CVE-2016-2358](https://insights.sbomify.com/CVE-2016-2358/): Hardcoded credentials in IP security cameras (critical 9.8) - [CVE-2016-2357](https://insights.sbomify.com/CVE-2016-2357/): Hardcoded credentials in IP security cameras (critical 9.8) - [CVE-2016-2356](https://insights.sbomify.com/CVE-2016-2356/): Memory corruption in IP security cameras (critical 9.8) - [CVE-2016-2355](https://insights.sbomify.com/CVE-2016-2355/): SQL injection in dotcms:dotcms (critical 9.8) - [CVE-2016-2354](https://insights.sbomify.com/CVE-2016-2354/): Auth bypass in lemurmonitors:bluedriver (high 8.8) - [CVE-2016-2353](https://insights.sbomify.com/CVE-2016-2353/): Privilege escalation in accellion:file transfer appliance (high 7.8) - [CVE-2016-2352](https://insights.sbomify.com/CVE-2016-2352/): Privilege escalation in accellion:file transfer appliance (high 8.8) - [CVE-2016-2351](https://insights.sbomify.com/CVE-2016-2351/): SQL injection in accellion:file transfer appliance (critical 9.8) - [CVE-2016-2350](https://insights.sbomify.com/CVE-2016-2350/): Cross-site scripting in accellion:file transfer appliance (medium 6.1) - [CVE-2016-2349](https://insights.sbomify.com/CVE-2016-2349/): Auth bypass in bmc:remedy action request system (high 7.5) - [CVE-2016-2347](https://insights.sbomify.com/CVE-2016-2347/): Integer overflow in debian:debian linux (high 7.8) - [CVE-2016-2346](https://insights.sbomify.com/CVE-2016-2346/): Security feature bypass in allroundautomations:pl\/sql developer (high 8.1) - [CVE-2016-2345](https://insights.sbomify.com/CVE-2016-2345/): Memory corruption in dameware:mini remote control (critical 9.8) - [CVE-2016-2344](https://insights.sbomify.com/CVE-2016-2344/): Memory corruption in autodesk:autodesk backburner (high 7.5) - [CVE-2016-2343](https://insights.sbomify.com/CVE-2016-2343/): Hardcoded credentials in patterson dental:eaglesoft (critical 9.8) - [CVE-2016-2342](https://insights.sbomify.com/CVE-2016-2342/): Memory corruption in debian:debian linux (high 8.1) - [CVE-2016-2340](https://insights.sbomify.com/CVE-2016-2340/): XML external entity in graniteds:granite data services (medium 5.4) - [CVE-2016-2339](https://insights.sbomify.com/CVE-2016-2339/): Memory corruption in Ruby (critical 9.8) - [CVE-2016-2338](https://insights.sbomify.com/CVE-2016-2338/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2016-2337](https://insights.sbomify.com/CVE-2016-2337/): Memory corruption in Ruby (critical 9.8) - [CVE-2016-2336](https://insights.sbomify.com/CVE-2016-2336/): Memory corruption in Ruby (critical 9.8) - [CVE-2016-2335](https://insights.sbomify.com/CVE-2016-2335/): Memory corruption in 7-zip:7-zip (high 8.8) - [CVE-2016-2334](https://insights.sbomify.com/CVE-2016-2334/): Memory corruption in 7-zip:7-zip (high 7.8) - [CVE-2016-2333](https://insights.sbomify.com/CVE-2016-2333/): Hardcoded credentials in systech:syslink sl-1000 modular gateway firmware (high 7.5) - [CVE-2016-2332](https://insights.sbomify.com/CVE-2016-2332/): Command injection in systech:syslink sl-1000 modular gateway firmware (high 8.8) - [CVE-2016-2331](https://insights.sbomify.com/CVE-2016-2331/): Hardcoded credentials in systech:syslink sl-1000 modular gateway firmware (critical 9.8) - [CVE-2016-2330](https://insights.sbomify.com/CVE-2016-2330/): Memory corruption in canonical:ubuntu linux (high 8.8) - [CVE-2016-2329](https://insights.sbomify.com/CVE-2016-2329/): Memory corruption in ffmpeg:ffmpeg (high 8.8) - [CVE-2016-2328](https://insights.sbomify.com/CVE-2016-2328/): Memory corruption in ffmpeg:ffmpeg (high 8.8) - [CVE-2016-2327](https://insights.sbomify.com/CVE-2016-2327/): Memory corruption in ffmpeg:ffmpeg (high 8.8) - [CVE-2016-2326](https://insights.sbomify.com/CVE-2016-2326/): Integer overflow in canonical:ubuntu linux (high 8.8) - [CVE-2016-2324](https://insights.sbomify.com/CVE-2016-2324/): Integer overflow in git-scm:git (critical 9.8) - [CVE-2016-2318](https://insights.sbomify.com/CVE-2016-2318/): Null dereference in debian:debian linux (medium 5.5) - [CVE-2016-2317](https://insights.sbomify.com/CVE-2016-2317/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2016-2316](https://insights.sbomify.com/CVE-2016-2316/): Denial of service in digium:asterisk (medium 5.9) - [CVE-2016-2315](https://insights.sbomify.com/CVE-2016-2315/): Memory corruption in git-scm:git (critical 9.8) - [CVE-2016-2314](https://insights.sbomify.com/CVE-2016-2314/): Denial of service in huawei:mt882 firmware (medium 4.9) - [CVE-2016-2313](https://insights.sbomify.com/CVE-2016-2313/): Auth bypass in cacti:cacti (high 8.8) - [CVE-2016-2312](https://insights.sbomify.com/CVE-2016-2312/): Security feature bypass in fedoraproject:fedora (medium 6.8) - [CVE-2016-2311](https://insights.sbomify.com/CVE-2016-2311/): Information disclosure in blackbox:alertwerks servsensor contact firmware (medium 6.5) - [CVE-2016-2310](https://insights.sbomify.com/CVE-2016-2310/): Hardcoded credentials in ge:multilink firmware (critical 9.8) - [CVE-2016-2309](https://insights.sbomify.com/CVE-2016-2309/): Security feature bypass in irz:ruh2 (high 7.2) - [CVE-2016-2308](https://insights.sbomify.com/CVE-2016-2308/): Information disclosure in american auto-matrix:aspect-matrix building automation front-end solutions application (high 8.6) - [CVE-2016-2307](https://insights.sbomify.com/CVE-2016-2307/): Information disclosure in american auto-matrix:aspect-matrix building automation front-end solutions application (high 7.5) - [CVE-2016-2306](https://insights.sbomify.com/CVE-2016-2306/): Information disclosure in ecava:integraxor (high 7.5) - [CVE-2016-2305](https://insights.sbomify.com/CVE-2016-2305/): Cross-site scripting in ecava:integraxor (medium 6.1) - [CVE-2016-2304](https://insights.sbomify.com/CVE-2016-2304/): Information disclosure in ecava:integraxor (medium 4.3) - [CVE-2016-2303](https://insights.sbomify.com/CVE-2016-2303/): Other in ecava:integraxor (medium 5.3) - [CVE-2016-2302](https://insights.sbomify.com/CVE-2016-2302/): Information disclosure in ecava:integraxor (medium 5.3) - [CVE-2016-2301](https://insights.sbomify.com/CVE-2016-2301/): SQL injection in ecava:integraxor (medium 6.3) - [CVE-2016-2300](https://insights.sbomify.com/CVE-2016-2300/): Auth bypass in ecava:integraxor (medium 6.5) - [CVE-2016-2299](https://insights.sbomify.com/CVE-2016-2299/): SQL injection in ecava:integraxor (high 7.3) - [CVE-2016-2298](https://insights.sbomify.com/CVE-2016-2298/): Information disclosure in meteocontrol:web\'log basic 100 (critical 9.8) - [CVE-2016-2297](https://insights.sbomify.com/CVE-2016-2297/): Command injection in meteocontrol:web\'log basic 100 (critical 9.4) - [CVE-2016-2296](https://insights.sbomify.com/CVE-2016-2296/): Auth bypass in meteocontrol:web\'log basic 100 (critical 9.4) - [CVE-2016-2295](https://insights.sbomify.com/CVE-2016-2295/): Information disclosure in moxa:miineport e1 4641 firmware (high 7.5) - [CVE-2016-2294](https://insights.sbomify.com/CVE-2016-2294/): Information disclosure in accuenergy:acuvim ii net firmware (high 7.5) - [CVE-2016-2293](https://insights.sbomify.com/CVE-2016-2293/): Information disclosure in accuenergy:acuvim ii net firmware (high 8.6) - [CVE-2016-2292](https://insights.sbomify.com/CVE-2016-2292/): Memory corruption in schneider-electric:proface gp-pro ex ex-ed (medium 6.5) - [CVE-2016-2291](https://insights.sbomify.com/CVE-2016-2291/): Memory corruption in schneider-electric:proface gp-pro ex ex-ed (medium 6.5) - [CVE-2016-2290](https://insights.sbomify.com/CVE-2016-2290/): Memory corruption in schneider-electric:proface gp-pro ex ex-ed (high 8.8) - [CVE-2016-2289](https://insights.sbomify.com/CVE-2016-2289/): Path traversal in iconics:webhmi (high 7.5) - [CVE-2016-2288](https://insights.sbomify.com/CVE-2016-2288/): Privilege escalation in cogentdatahub:cogent datahub (high 7.8) - [CVE-2016-2287](https://insights.sbomify.com/CVE-2016-2287/): Cross-site scripting in xzeres:442sr os (medium 6.1) - [CVE-2016-2286](https://insights.sbomify.com/CVE-2016-2286/): Hardcoded credentials in moxa:miineport e1 4641 firmware (high 7.5) - [CVE-2016-2285](https://insights.sbomify.com/CVE-2016-2285/): Cross-site request forgery in moxa:miineport e1 4641 firmware (high 8.8) - [CVE-2016-2283](https://insights.sbomify.com/CVE-2016-2283/): Weak cryptography in moxa:ioadmin firmware (medium 5.3) - [CVE-2016-2282](https://insights.sbomify.com/CVE-2016-2282/): Weak cryptography in moxa:ioadmin firmware (medium 5.3) - [CVE-2016-2281](https://insights.sbomify.com/CVE-2016-2281/): Privilege escalation in abb:panel builder 800 (high 7.2) - [CVE-2016-2280](https://insights.sbomify.com/CVE-2016-2280/): Memory corruption in honeywell:uniformance process history database (high 7.5) - [CVE-2016-2279](https://insights.sbomify.com/CVE-2016-2279/): Cross-site scripting in rockwellautomation:compactlogix 1756-en2f series a firmware (medium 6.1) - [CVE-2016-2278](https://insights.sbomify.com/CVE-2016-2278/): Command injection in schneider-electric:struxureware building operations automation server as-p firmware (high 7.2) - [CVE-2016-2277](https://insights.sbomify.com/CVE-2016-2277/): Other in rockwellautomation:integrated architecture builder (medium 6.3) - [CVE-2016-2275](https://insights.sbomify.com/CVE-2016-2275/): Auth bypass in advantech:vesp211-232 firmware (critical 9.8) - [CVE-2016-2274](https://insights.sbomify.com/CVE-2016-2274/): Cross-site scripting in Adcon Telemetry A850 Telemetry Gateway Base Station (medium 6.1) - [CVE-2016-2272](https://insights.sbomify.com/CVE-2016-2272/): Other in eaton lighting systems:eg2 web control (high 7.5) - [CVE-2016-2271](https://insights.sbomify.com/CVE-2016-2271/): Denial of service in xen:xen (medium 5.5) - [CVE-2016-2270](https://insights.sbomify.com/CVE-2016-2270/): Denial of service in debian:debian linux (medium 6.8) - [CVE-2016-2268](https://insights.sbomify.com/CVE-2016-2268/): Weak cryptography in dell:secureworks (medium 6.8) - [CVE-2016-2246](https://insights.sbomify.com/CVE-2016-2246/): Privilege escalation in hp:thinpro (high 7.8) - [CVE-2016-2245](https://insights.sbomify.com/CVE-2016-2245/): Auth bypass in hp:support assistant (critical 9.8) - [CVE-2016-2244](https://insights.sbomify.com/CVE-2016-2244/): Information disclosure in hp:futuresmart firmware (medium 5.9) - [CVE-2016-2243](https://insights.sbomify.com/CVE-2016-2243/): Denial of service in hp:1000 series firmware (high 7.9) - [CVE-2016-2242](https://insights.sbomify.com/CVE-2016-2242/): Code injection in exponentcms:exponent cms (critical 9.8) - [CVE-2016-2233](https://insights.sbomify.com/CVE-2016-2233/): Memory corruption in hexchat project:hexchat (high 7.5) - [CVE-2016-2232](https://insights.sbomify.com/CVE-2016-2232/): Null dereference in digium:asterisk (medium 6.5) - [CVE-2016-2231](https://insights.sbomify.com/CVE-2016-2231/): Memory corruption in huawei:mt882 firmware (critical 9.8) - [CVE-2016-2230](https://insights.sbomify.com/CVE-2016-2230/): Hardcoded credentials in openelec:openelec (critical 9.8) - [CVE-2016-2228](https://insights.sbomify.com/CVE-2016-2228/): Cross-site scripting in debian:debian linux (medium 6.1) - [CVE-2016-2226](https://insights.sbomify.com/CVE-2016-2226/): Integer overflow in gnu:libiberty (high 7.8) - [CVE-2016-2225](https://insights.sbomify.com/CVE-2016-2225/): Denial of service in uclibc-ng project:uclibc-ng (high 7.5) - [CVE-2016-2224](https://insights.sbomify.com/CVE-2016-2224/): Denial of service in uclibc-ng project:uclibc-ng (high 7.5) - [CVE-2016-2222](https://insights.sbomify.com/CVE-2016-2222/): Server-side request forgery in wordpress:wordpress (high 8.6) - [CVE-2016-2221](https://insights.sbomify.com/CVE-2016-2221/): Open redirect in wordpress:wordpress (high 7.4) - [CVE-2016-2219](https://insights.sbomify.com/CVE-2016-2219/): Cross-site scripting in paloaltonetworks:pan-os (medium 5.4) - [CVE-2016-2217](https://insights.sbomify.com/CVE-2016-2217/): Weak cryptography in dest-unreach:socat (medium 5.3) - [CVE-2016-2216](https://insights.sbomify.com/CVE-2016-2216/): Security feature bypass in fedoraproject:fedora (high 7.5) - [CVE-2016-2214](https://insights.sbomify.com/CVE-2016-2214/): Cross-site scripting in huawei:agile controller-campus (medium 6.1) - [CVE-2016-2213](https://insights.sbomify.com/CVE-2016-2213/): Memory corruption in ffmpeg:ffmpeg (medium 6.5) - [CVE-2016-2212](https://insights.sbomify.com/CVE-2016-2212/): Information disclosure in magento:magento (medium 5.3) --- From sbomify Insights: https://insights.sbomify.com/years/2016/page/61/