# Vulnerabilities published in 2016


- [CVE-2016-2211](https://insights.sbomify.com/CVE-2016-2211/): Memory corruption in symantec:advanced threat protection (high 7.8)
- [CVE-2016-2210](https://insights.sbomify.com/CVE-2016-2210/): Memory corruption in symantec:advanced threat protection (high 7.3)
- [CVE-2016-2209](https://insights.sbomify.com/CVE-2016-2209/): Memory corruption in symantec:advanced threat protection (high 7.3)
- [CVE-2016-2208](https://insights.sbomify.com/CVE-2016-2208/): Memory corruption in symantec:anti-virus engine (critical 9.1)
- [CVE-2016-2207](https://insights.sbomify.com/CVE-2016-2207/): Memory corruption in symantec:advanced threat protection (high 8.4)
- [CVE-2016-2206](https://insights.sbomify.com/CVE-2016-2206/): Path traversal in symantec:workspace streaming (medium 5.7)
- [CVE-2016-2205](https://insights.sbomify.com/CVE-2016-2205/): Path traversal in symantec:workspace streaming (medium 5.7)
- [CVE-2016-2204](https://insights.sbomify.com/CVE-2016-2204/): Command injection in symantec:messaging gateway (high 8.2)
- [CVE-2016-2203](https://insights.sbomify.com/CVE-2016-2203/): Information disclosure in symantec:messaging gateway (high 7.8)
- [CVE-2016-2202](https://insights.sbomify.com/CVE-2016-2202/): Security feature bypass in symantec:altiris it management suite (medium 5.5)
- [CVE-2016-2201](https://insights.sbomify.com/CVE-2016-2201/): Security feature bypass in siemens:simatic s7-1500 cpu firmware (medium 5.3)
- [CVE-2016-2200](https://insights.sbomify.com/CVE-2016-2200/): Denial of service in siemens:simatic s7-1500 cpu firmware (high 7.5)
- [CVE-2016-2199](https://insights.sbomify.com/CVE-2016-2199/): Cross-site request forgery in mcafee:vulnerability manager (high 8.8)
- [CVE-2016-2198](https://insights.sbomify.com/CVE-2016-2198/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2016-2197](https://insights.sbomify.com/CVE-2016-2197/): Null dereference in qemu:qemu (medium 5.5)
- [CVE-2016-2196](https://insights.sbomify.com/CVE-2016-2196/): Memory corruption in botan project:botan (critical 9.8)
- [CVE-2016-2195](https://insights.sbomify.com/CVE-2016-2195/): Integer overflow in botan project:botan (critical 9.8)
- [CVE-2016-2194](https://insights.sbomify.com/CVE-2016-2194/): Denial of service in botan project:botan (high 7.5)
- [CVE-2016-2193](https://insights.sbomify.com/CVE-2016-2193/): Security feature bypass in postgresql:postgresql (high 7.5)
- [CVE-2016-2192](https://insights.sbomify.com/CVE-2016-2192/): Missing authorization in pl\/java project:pl\/java (medium 6.5)
- [CVE-2016-2191](https://insights.sbomify.com/CVE-2016-2191/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2016-2190](https://insights.sbomify.com/CVE-2016-2190/): Moodle sensitive information disclosure (medium 5.3)
- [CVE-2016-2188](https://insights.sbomify.com/CVE-2016-2188/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2016-2187](https://insights.sbomify.com/CVE-2016-2187/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2016-2186](https://insights.sbomify.com/CVE-2016-2186/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2016-2185](https://insights.sbomify.com/CVE-2016-2185/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2016-2184](https://insights.sbomify.com/CVE-2016-2184/): Null dereference in canonical:ubuntu linux (medium 4.6)
- [CVE-2016-2183](https://insights.sbomify.com/CVE-2016-2183/): Weak cryptography in cisco:content security management appliance (high 7.5)
- [CVE-2016-2182](https://insights.sbomify.com/CVE-2016-2182/): Memory corruption in hp:icewall federation agent (critical 9.8)
- [CVE-2016-2181](https://insights.sbomify.com/CVE-2016-2181/): Denial of service in openssl:openssl (high 7.5)
- [CVE-2016-2180](https://insights.sbomify.com/CVE-2016-2180/): Memory corruption in openssl:openssl (high 7.5)
- [CVE-2016-2179](https://insights.sbomify.com/CVE-2016-2179/): Denial of service in openssl:openssl (high 7.5)
- [CVE-2016-2178](https://insights.sbomify.com/CVE-2016-2178/): Weak cryptography in canonical:ubuntu linux (medium 5.5)
- [CVE-2016-2177](https://insights.sbomify.com/CVE-2016-2177/): Integer overflow in hp:icewall mcrp (critical 9.8)
- [CVE-2016-2176](https://insights.sbomify.com/CVE-2016-2176/): Memory corruption in openssl:openssl (high 8.2)
- [CVE-2016-2175](https://insights.sbomify.com/CVE-2016-2175/): High severity vulnerability that affects org.apache.pdfbox:pdfbox (high 7.8)
- [CVE-2016-2174](https://insights.sbomify.com/CVE-2016-2174/): SQL injection vulnerability in the policy admin tool in Apache Ranger (high 7.2)
- [CVE-2016-2173](https://insights.sbomify.com/CVE-2016-2173/): Improper Input Validation in Spring AMQP (critical 9.8)
- [CVE-2016-2171](https://insights.sbomify.com/CVE-2016-2171/): Missing authorization in apache:jetspeed (high 7.5)
- [CVE-2016-2170](https://insights.sbomify.com/CVE-2016-2170/): Deserialization in apache:ofbiz (critical 9.8)
- [CVE-2016-2169](https://insights.sbomify.com/CVE-2016-2169/): Business logic in Cloud Controller (medium 5.3)
- [CVE-2016-2168](https://insights.sbomify.com/CVE-2016-2168/): Null dereference in apache:subversion (medium 6.5)
- [CVE-2016-2167](https://insights.sbomify.com/CVE-2016-2167/): Auth bypass in apache:subversion (medium 6.8)
- [CVE-2016-2166](https://insights.sbomify.com/CVE-2016-2166/): Moderate severity vulnerability that affects org.apache.qpid:proton-j (medium 6.5)
- [CVE-2016-2165](https://insights.sbomify.com/CVE-2016-2165/): Cross-site scripting in Cloud Foundry (medium 6.5)
- [CVE-2016-2164](https://insights.sbomify.com/CVE-2016-2164/): Apache OpenMeetings allows remote attackers to read arbitrary files by attempting to upload a file (high 7.5)
- [CVE-2016-2163](https://insights.sbomify.com/CVE-2016-2163/): Apache OpenMeetings Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2016-2162](https://insights.sbomify.com/CVE-2016-2162/): Apache Struts XSS Vulnerability (medium 6.1)
- [CVE-2016-2161](https://insights.sbomify.com/CVE-2016-2161/): Denial of service in Apache HTTP Server (high 7.5)
- [CVE-2016-2160](https://insights.sbomify.com/CVE-2016-2160/): Privilege escalation in redhat:openshift (high 8.8)
- [CVE-2016-2159](https://insights.sbomify.com/CVE-2016-2159/): Moodle External function mod_assign_save_submission does not check due dates (medium 4.3)
- [CVE-2016-2158](https://insights.sbomify.com/CVE-2016-2158/): Moodle allows attackers to obtain sensitive category-detail information (medium 4.3)
- [CVE-2016-2157](https://insights.sbomify.com/CVE-2016-2157/): Moodle cross-site request forgery (CSRF) vulnerability (high 8.8)
- [CVE-2016-2156](https://insights.sbomify.com/CVE-2016-2156/): Moodle provides calendar-event data without considering whether an activity is hidden (medium 4.3)
- [CVE-2016-2155](https://insights.sbomify.com/CVE-2016-2155/): Moodle allows attackers to modify "Exclude grade" settings (medium 4.3)
- [CVE-2016-2154](https://insights.sbomify.com/CVE-2016-2154/): Moodle allows attackers to discover hidden course names (medium 4.3)
- [CVE-2016-2153](https://insights.sbomify.com/CVE-2016-2153/): Moodle Reflected XSS in mod_data advanced search (medium 6.1)
- [CVE-2016-2152](https://insights.sbomify.com/CVE-2016-2152/): Moodle XSS from profile fields from external db (medium 6.1)
- [CVE-2016-2151](https://insights.sbomify.com/CVE-2016-2151/): Moodle allows attackers to discover student e-mail addresses (medium 4.3)
- [CVE-2016-2150](https://insights.sbomify.com/CVE-2016-2150/): Memory corruption in debian:debian linux (high 7.1)
- [CVE-2016-2149](https://insights.sbomify.com/CVE-2016-2149/): Information disclosure in redhat:openshift (medium 6.5)
- [CVE-2016-2148](https://insights.sbomify.com/CVE-2016-2148/): Memory corruption in busybox:busybox (critical 9.8)
- [CVE-2016-2147](https://insights.sbomify.com/CVE-2016-2147/): Integer overflow in busybox:busybox (high 7.5)
- [CVE-2016-2146](https://insights.sbomify.com/CVE-2016-2146/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2016-2145](https://insights.sbomify.com/CVE-2016-2145/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2016-2143](https://insights.sbomify.com/CVE-2016-2143/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2016-2142](https://insights.sbomify.com/CVE-2016-2142/): Information disclosure in redhat:openshift (medium 5.5)
- [CVE-2016-2141](https://insights.sbomify.com/CVE-2016-2141/): Improper Input Validation in JGroups (critical 9.8)
- [CVE-2016-2140](https://insights.sbomify.com/CVE-2016-2140/): OpenStack Nova host data access through resize/migration (medium 5.3)
- [CVE-2016-2139](https://insights.sbomify.com/CVE-2016-2139/): Cross-site scripting in kippo-graph (medium 6.4)
- [CVE-2016-2138](https://insights.sbomify.com/CVE-2016-2138/): Cross-site scripting in kippo-graph (medium 6.4)
- [CVE-2016-2126](https://insights.sbomify.com/CVE-2016-2126/): Privilege escalation in samba:samba (medium 6.5)
- [CVE-2016-2125](https://insights.sbomify.com/CVE-2016-2125/): Auth bypass in samba (medium 6.4)
- [CVE-2016-2124](https://insights.sbomify.com/CVE-2016-2124/): Auth bypass in samba (medium 5.9)
- [CVE-2016-2123](https://insights.sbomify.com/CVE-2016-2123/): Integer overflow in samba (high 8.1)
- [CVE-2016-2121](https://insights.sbomify.com/CVE-2016-2121/): Misconfiguration in redis (medium 4.0)
- [CVE-2016-2120](https://insights.sbomify.com/CVE-2016-2120/): Integer overflow in pdns (high 7.5)
- [CVE-2016-2119](https://insights.sbomify.com/CVE-2016-2119/): Security feature bypass in samba:samba (high 7.5)
- [CVE-2016-2118](https://insights.sbomify.com/CVE-2016-2118/): Security feature bypass in canonical:ubuntu linux (high 7.5)
- [CVE-2016-2117](https://insights.sbomify.com/CVE-2016-2117/): Information disclosure in canonical:ubuntu linux (high 7.5)
- [CVE-2016-2116](https://insights.sbomify.com/CVE-2016-2116/): Denial of service in canonical:ubuntu linux (medium 5.7)
- [CVE-2016-2115](https://insights.sbomify.com/CVE-2016-2115/): Security feature bypass in canonical:ubuntu linux (medium 5.9)
- [CVE-2016-2114](https://insights.sbomify.com/CVE-2016-2114/): Security feature bypass in canonical:ubuntu linux (medium 5.9)
- [CVE-2016-2113](https://insights.sbomify.com/CVE-2016-2113/): Weak cryptography in canonical:ubuntu linux (high 7.4)
- [CVE-2016-2112](https://insights.sbomify.com/CVE-2016-2112/): Security feature bypass in canonical:ubuntu linux (medium 5.9)
- [CVE-2016-2111](https://insights.sbomify.com/CVE-2016-2111/): Security feature bypass in canonical:ubuntu linux (medium 6.3)
- [CVE-2016-2110](https://insights.sbomify.com/CVE-2016-2110/): Security feature bypass in canonical:ubuntu linux (medium 5.9)
- [CVE-2016-2109](https://insights.sbomify.com/CVE-2016-2109/): Denial of service in openssl:openssl (high 7.5)
- [CVE-2016-2108](https://insights.sbomify.com/CVE-2016-2108/): Memory corruption in google:android (critical 9.8)
- [CVE-2016-2107](https://insights.sbomify.com/CVE-2016-2107/): Weak cryptography in canonical:ubuntu linux (medium 5.9)
- [CVE-2016-2106](https://insights.sbomify.com/CVE-2016-2106/): Integer overflow in openssl:openssl (high 7.5)
- [CVE-2016-2105](https://insights.sbomify.com/CVE-2016-2105/): Integer overflow in apple:mac os x (high 7.5)
- [CVE-2016-2104](https://insights.sbomify.com/CVE-2016-2104/): Cross-site scripting in redhat:satellite (medium 6.1)
- [CVE-2016-2103](https://insights.sbomify.com/CVE-2016-2103/): Cross-site scripting in redhat:satellite (medium 6.1)
- [CVE-2016-2102](https://insights.sbomify.com/CVE-2016-2102/): Missing authorization in haproxy:haproxy (medium 5.3)
- [CVE-2016-2100](https://insights.sbomify.com/CVE-2016-2100/): Missing authorization in theforeman:foreman (medium 5.4)
- [CVE-2016-2099](https://insights.sbomify.com/CVE-2016-2099/): Use after free in apache:xerces-c\+\+ (critical 9.8)
- [CVE-2016-2098](https://insights.sbomify.com/CVE-2016-2098/): actionpack allows remote code execution via application's unrestricted use of render method (high 7.3)
- [CVE-2016-2097](https://insights.sbomify.com/CVE-2016-2097/): actionview contains Path Traversal vulnerability (medium 5.3)
- [CVE-2016-2094](https://insights.sbomify.com/CVE-2016-2094/): Denial of service in jboss:enterprise application platform (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/62/