# Vulnerabilities published in 2016


- [CVE-2016-2091](https://insights.sbomify.com/CVE-2016-2091/): Memory corruption in libdwarf project:libdwarf (low 3.3)
- [CVE-2016-2090](https://insights.sbomify.com/CVE-2016-2090/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2016-2089](https://insights.sbomify.com/CVE-2016-2089/): Memory corruption in jasper project:jasper (medium 6.5)
- [CVE-2016-2088](https://insights.sbomify.com/CVE-2016-2088/): Denial of service in isc:bind (medium 6.8)
- [CVE-2016-2087](https://insights.sbomify.com/CVE-2016-2087/): Path traversal in hexchat project:hexchat (high 7.4)
- [CVE-2016-2086](https://insights.sbomify.com/CVE-2016-2086/): Other in fedoraproject:fedora (high 7.5)
- [CVE-2016-2085](https://insights.sbomify.com/CVE-2016-2085/): Weak cryptography in linux:linux kernel (medium 5.5)
- [CVE-2016-2084](https://insights.sbomify.com/CVE-2016-2084/): Information disclosure in f5:big-ip access policy manager (high 7.4)
- [CVE-2016-2082](https://insights.sbomify.com/CVE-2016-2082/): Cross-site request forgery in vmware:vrealize log insight (high 8.8)
- [CVE-2016-2081](https://insights.sbomify.com/CVE-2016-2081/): Cross-site scripting in vmware:vrealize log insight (medium 6.1)
- [CVE-2016-2079](https://insights.sbomify.com/CVE-2016-2079/): Information disclosure in vmware:nsx edge (medium 5.9)
- [CVE-2016-2078](https://insights.sbomify.com/CVE-2016-2078/): Cross-site scripting in vmware:vcenter server (medium 6.1)
- [CVE-2016-2077](https://insights.sbomify.com/CVE-2016-2077/): Privilege escalation in vmware:player (critical 9.8)
- [CVE-2016-2076](https://insights.sbomify.com/CVE-2016-2076/): Auth bypass in vmware:vcenter server (high 7.6)
- [CVE-2016-2075](https://insights.sbomify.com/CVE-2016-2075/): Cross-site scripting in vmware:vrealize business advanced and enterprise (medium 5.4)
- [CVE-2016-2074](https://insights.sbomify.com/CVE-2016-2074/): Memory corruption in openvswitch:openvswitch (critical 9.8)
- [CVE-2016-2073](https://insights.sbomify.com/CVE-2016-2073/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2016-2072](https://insights.sbomify.com/CVE-2016-2072/): Other in citrix:netscaler (medium 6.1)
- [CVE-2016-2071](https://insights.sbomify.com/CVE-2016-2071/): Privilege escalation in citrix:netscaler (critical 9.8)
- [CVE-2016-2070](https://insights.sbomify.com/CVE-2016-2070/): Denial of service in linux:linux kernel (high 7.5)
- [CVE-2016-2069](https://insights.sbomify.com/CVE-2016-2069/): Race condition in canonical:ubuntu linux (high 7.4)
- [CVE-2016-2068](https://insights.sbomify.com/CVE-2016-2068/): Integer overflow in google:android (high 7.8)
- [CVE-2016-2067](https://insights.sbomify.com/CVE-2016-2067/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-2066](https://insights.sbomify.com/CVE-2016-2066/): Integer overflow in linux:linux kernel (high 7.8)
- [CVE-2016-2065](https://insights.sbomify.com/CVE-2016-2065/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2016-2064](https://insights.sbomify.com/CVE-2016-2064/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2016-2063](https://insights.sbomify.com/CVE-2016-2063/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2016-2062](https://insights.sbomify.com/CVE-2016-2062/): Integer overflow in google:nexus 5x firmware (high 7.8)
- [CVE-2016-2061](https://insights.sbomify.com/CVE-2016-2061/): Integer overflow in linux:linux kernel (high 7.8)
- [CVE-2016-2060](https://insights.sbomify.com/CVE-2016-2060/): Security feature bypass in google:android (high 7.8)
- [CVE-2016-2059](https://insights.sbomify.com/CVE-2016-2059/): Race condition in google:android (high 7.0)
- [CVE-2016-2058](https://insights.sbomify.com/CVE-2016-2058/): Cross-site scripting in debian:debian linux (medium 5.4)
- [CVE-2016-2057](https://insights.sbomify.com/CVE-2016-2057/): Misconfiguration in debian:debian linux (low 3.3)
- [CVE-2016-2056](https://insights.sbomify.com/CVE-2016-2056/): Command injection in debian:debian linux (high 8.8)
- [CVE-2016-2055](https://insights.sbomify.com/CVE-2016-2055/): Information disclosure in debian:debian linux (high 7.5)
- [CVE-2016-2054](https://insights.sbomify.com/CVE-2016-2054/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2016-2053](https://insights.sbomify.com/CVE-2016-2053/): Denial of service in linux:linux kernel (medium 4.7)
- [CVE-2016-2052](https://insights.sbomify.com/CVE-2016-2052/): Memory corruption in google:chrome (high 7.6)
- [CVE-2016-2051](https://insights.sbomify.com/CVE-2016-2051/): Other in google:chrome (critical 9.8)
- [CVE-2016-2050](https://insights.sbomify.com/CVE-2016-2050/): Memory corruption in libdwarf project:libdwarf (medium 6.5)
- [CVE-2016-2049](https://insights.sbomify.com/CVE-2016-2049/): Auth bypass in janrain:php-openid (high 8.8)
- [CVE-2016-2048](https://insights.sbomify.com/CVE-2016-2048/): Django Access Restrictions Bypass (medium 5.5)
- [CVE-2016-2047](https://insights.sbomify.com/CVE-2016-2047/): Security feature bypass in canonical:ubuntu linux (medium 5.9)
- [CVE-2016-2046](https://insights.sbomify.com/CVE-2016-2046/): Cross-site scripting in sophos:unified threat management software (medium 6.1)
- [CVE-2016-2045](https://insights.sbomify.com/CVE-2016-2045/): Cross-site scripting in fedoraproject:fedora (medium 5.4)
- [CVE-2016-2044](https://insights.sbomify.com/CVE-2016-2044/): Information disclosure in fedoraproject:fedora (medium 5.3)
- [CVE-2016-2043](https://insights.sbomify.com/CVE-2016-2043/): Cross-site scripting in fedoraproject:fedora (medium 5.4)
- [CVE-2016-2042](https://insights.sbomify.com/CVE-2016-2042/): Information disclosure in fedoraproject:fedora (medium 5.3)
- [CVE-2016-2041](https://insights.sbomify.com/CVE-2016-2041/): phpMyAdmin Unsafe comparison of XSRF/CSRF token (high 7.5)
- [CVE-2016-2040](https://insights.sbomify.com/CVE-2016-2040/): phpMyAdmin XSS Vulnerability (medium 5.4)
- [CVE-2016-2039](https://insights.sbomify.com/CVE-2016-2039/): Cross-site request forgery in fedoraproject:fedora (medium 5.3)
- [CVE-2016-2038](https://insights.sbomify.com/CVE-2016-2038/): Information disclosure in fedoraproject:fedora (medium 5.3)
- [CVE-2016-2037](https://insights.sbomify.com/CVE-2016-2037/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2016-2036](https://insights.sbomify.com/CVE-2016-2036/): Null dereference in samsung:galaxy note 3 firmware (medium 5.5)
- [CVE-2016-2034](https://insights.sbomify.com/CVE-2016-2034/): SQL injection in arubanetworks:clearpass (critical 9.8)
- [CVE-2016-2032](https://insights.sbomify.com/CVE-2016-2032/): Auth bypass in arubanetworks:airwave (high 7.5)
- [CVE-2016-2031](https://insights.sbomify.com/CVE-2016-2031/): Other in arubanetworks:airwave (critical 9.8)
- [CVE-2016-2030](https://insights.sbomify.com/CVE-2016-2030/): Other in hp:matrix operating environment (high 8.1)
- [CVE-2016-2029](https://insights.sbomify.com/CVE-2016-2029/): Other in hp:matrix operating environment (critical 9.1)
- [CVE-2016-2028](https://insights.sbomify.com/CVE-2016-2028/): Other in hp:matrix operating environment (high 8.1)
- [CVE-2016-2027](https://insights.sbomify.com/CVE-2016-2027/): Information disclosure in hp:matrix operating environment (high 7.5)
- [CVE-2016-2026](https://insights.sbomify.com/CVE-2016-2026/): Information disclosure in hp:matrix operating environment (high 7.5)
- [CVE-2016-2025](https://insights.sbomify.com/CVE-2016-2025/): Information disclosure in hp:service manager (high 7.5)
- [CVE-2016-2024](https://insights.sbomify.com/CVE-2016-2024/): Other in hp:insight contol (critical 9.8)
- [CVE-2016-2023](https://insights.sbomify.com/CVE-2016-2023/): Information disclosure in hp:restful interface tool (medium 5.5)
- [CVE-2016-2022](https://insights.sbomify.com/CVE-2016-2022/): Other in hp:matrix operating environment (high 8.1)
- [CVE-2016-2021](https://insights.sbomify.com/CVE-2016-2021/): Other in hp:matrix operating environment (high 8.1)
- [CVE-2016-2020](https://insights.sbomify.com/CVE-2016-2020/): Other in hp:matrix operating environment (high 8.1)
- [CVE-2016-2019](https://insights.sbomify.com/CVE-2016-2019/): Other in hp:matrix operating environment (high 8.1)
- [CVE-2016-2018](https://insights.sbomify.com/CVE-2016-2018/): Other in hp:matrix operating environment (critical 9.1)
- [CVE-2016-2017](https://insights.sbomify.com/CVE-2016-2017/): Other in hp:matrix operating environment (high 8.1)
- [CVE-2016-2016](https://insights.sbomify.com/CVE-2016-2016/): Security feature bypass in hp:base-vxfs-50 (medium 5.5)
- [CVE-2016-2015](https://insights.sbomify.com/CVE-2016-2015/): Information disclosure in hp:system management homepage (high 7.1)
- [CVE-2016-2014](https://insights.sbomify.com/CVE-2016-2014/): Missing authorization in hp:network node manager i (high 8.1)
- [CVE-2016-2013](https://insights.sbomify.com/CVE-2016-2013/): Information disclosure in hp:network node manager i (medium 6.5)
- [CVE-2016-2012](https://insights.sbomify.com/CVE-2016-2012/): Auth bypass in hp:network node manager i (medium 6.5)
- [CVE-2016-2011](https://insights.sbomify.com/CVE-2016-2011/): Cross-site scripting in hp:network node manager i (medium 5.4)
- [CVE-2016-20104](https://insights.sbomify.com/CVE-2016-20104/): EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.php (high 8.7)
- [CVE-2016-20103](https://insights.sbomify.com/CVE-2016-20103/): Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.php (high 8.7)
- [CVE-2016-20102](https://insights.sbomify.com/CVE-2016-20102/): JavaMelody < 1.60.0 Reflected XSS via monitoring graph parameter (medium 5.1)
- [CVE-2016-20101](https://insights.sbomify.com/CVE-2016-20101/): Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php (critical 9.2)
- [CVE-2016-20100](https://insights.sbomify.com/CVE-2016-20100/): Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-preview (high 8.7)
- [CVE-2016-2010](https://insights.sbomify.com/CVE-2016-2010/): Cross-site scripting in hp:network node manager i (medium 5.4)
- [CVE-2016-20099](https://insights.sbomify.com/CVE-2016-20099/): L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe (medium 6.8)
- [CVE-2016-20098](https://insights.sbomify.com/CVE-2016-20098/): Moderator Toolbox before 4.0.14 Stored XSS via Removal Reasons Configuration (medium 5.1)
- [CVE-2016-20097](https://insights.sbomify.com/CVE-2016-20097/): Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad (high 8.7)
- [CVE-2016-20096](https://insights.sbomify.com/CVE-2016-20096/): Linknat VOS3000/VOS2009 2.1.2.0 SQL Injection via login.jsp (critical 9.3)
- [CVE-2016-20095](https://insights.sbomify.com/CVE-2016-20095/): Matrix42 Remote Control Host 3.20.0031 Unquoted Path Privilege Escalation (high 8.5)
- [CVE-2016-20094](https://insights.sbomify.com/CVE-2016-20094/): AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege (high 8.5)
- [CVE-2016-20093](https://insights.sbomify.com/CVE-2016-20093/): Wise Care 365 4.27 and Wise Disk Cleaner 9.29 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2016-20092](https://insights.sbomify.com/CVE-2016-20092/): NetDrive 2.6.12 Unquoted Service Path Elevation of Privilege (high 8.5)
- [CVE-2016-20091](https://insights.sbomify.com/CVE-2016-20091/): Windows Firewall Control 4.8.6.0 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2016-20090](https://insights.sbomify.com/CVE-2016-20090/): Comodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service Path (high 8.5)
- [CVE-2016-2009](https://insights.sbomify.com/CVE-2016-2009/): Deserialization in hp:network node manager i (high 8.8)
- [CVE-2016-20089](https://insights.sbomify.com/CVE-2016-20089/): Iperius Remote 1.7.0 Unquoted Service Path Elevation of Privilege (high 8.5)
- [CVE-2016-20088](https://insights.sbomify.com/CVE-2016-20088/): Comodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2016-20087](https://insights.sbomify.com/CVE-2016-20087/): Fortitude HTTP 1.0.4.0 Unquoted Service Path Elevation of Privilege (high 8.5)
- [CVE-2016-20086](https://insights.sbomify.com/CVE-2016-20086/): Vembu StoreGrid 4.0 Unquoted Service Path Privilege Escalation (high 8.5)
- [CVE-2016-20085](https://insights.sbomify.com/CVE-2016-20085/): Realtek High Definition Audio Driver 6.0.1.6730 Privilege Escalation (high 8.5)
- [CVE-2016-20084](https://insights.sbomify.com/CVE-2016-20084/): WordPress appointment-booking-calendar 1.1.24 Privilege Escalation XSS (medium 5.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/63/