Vulnerabilities published in 2016
9,398 vulnerabilities were published in 2016: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 69 of 94.
- CVE-2016-1561 Hardcoded credentials in exagrid:ex10000e firmware
- CVE-2016-1560 Hardcoded credentials in exagrid:ex10000e firmware
- CVE-2016-1559 Information disclosure in d-link:dap-1353 h\/w b1 firmware
- CVE-2016-1558 Memory corruption in dlink:dap-2230 firmware
- CVE-2016-1557 Information disclosure in netgear:wnap320 firmware
- CVE-2016-1556 Information disclosure in netgear:wn604 firmware
- CVE-2016-1555 NETGEAR Multiple WAP Devices Command Injection
- CVE-2016-1551 Security feature bypass in NTP
- CVE-2016-1550 Weak cryptography in NTP
- CVE-2016-1549 Business logic in NTP
- CVE-2016-1548 Security feature bypass in NTP
- CVE-2016-1547 Denial of service in NTP
- CVE-2016-1546 Denial of service in apache:http server
- CVE-2016-1544 Denial of service in nghttp2
- CVE-2016-1543 Auth bypass in bmc:bladelogic server automation console
- CVE-2016-1542 Auth bypass in bmc:bladelogic server automation console
- CVE-2016-1541 Memory corruption in libarchive:libarchive
- CVE-2016-1531 Privilege escalation in exim:exim
- CVE-2016-1526 Memory corruption in debian:debian linux
- CVE-2016-1525 Path traversal in netgear:prosafe network management software 300
- CVE-2016-1524 File upload in netgear:prosafe network management software 300
- CVE-2016-1523 Null dereference in debian:debian linux
- CVE-2016-1522 Memory corruption in debian:debian linux
- CVE-2016-1521 Memory corruption in debian:debian linux
- CVE-2016-1520 Weak cryptography in grandstream:wave
- CVE-2016-1519 Security feature bypass in grandstream:wave
- CVE-2016-1518 Weak cryptography in grandstream:wave
- CVE-2016-1517 Improper Input Validation in OpenCV
- CVE-2016-1516 Double Free in OpenCV
- CVE-2016-1513 Memory corruption in apache:openoffice
- CVE-2016-15060 PCMan FTP Server PORT buffer overflow
- CVE-2016-15059 Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buffer in encode_punycode.
- CVE-2016-15058 Hirschmann HiLCOS Classic Platform Password Exposure via SNMP
- CVE-2016-15057 Apache Continuum: Command injection leading to RCE
- CVE-2016-15056 Ubee EVW3226 Unauthenticated Backup File Disclosure
- CVE-2016-15055 JVC VN-T IP-Camera Directory Traversal via check.cgi
- CVE-2016-15053 Nagios XI < 5.2.4 XSS via “My Reports” Listing
- CVE-2016-15052 Nagios XI < 5.2.4 XSS via Menu System
- CVE-2016-15051 Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields
- CVE-2016-15050 Nagios XI < 5.2.4 SQL Injection in Notification Search
- CVE-2016-1505 Radicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component
- CVE-2016-15049 Nagios Log Server < 1.4.2 Dashboards Logs Table XSS
- CVE-2016-15048 AMTT HiBOS Command Injection RCE via server_ping.php
- CVE-2016-15047 AVTECH CloudSetup.cgi Authenticated Command Injection
- CVE-2016-15046 Hanwha Techwin SSM 1.32 & 1.4 ActiveMQ File Upload RCE
- CVE-2016-15045 Deepin lastore-daemon Privilege Escalation via Unsigned .deb Installation
- CVE-2016-15044 Kaltura < 11.1.0-2 PHP Object Injection RCE
- CVE-2016-15043 WP Mobile Detector <= 3.5 - Arbitrary File Upload
- CVE-2016-15042 Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload
- CVE-2016-15041 Cross-site scripting in MainWP Dashboard: Self-hosted WordPress Management for Agencies
- CVE-2016-15040 Kento Post View Counter <= 2.8 - SQL Injection
- CVE-2016-1504 Memory corruption in dhcpcd project:dhcpcd
- CVE-2016-15039 mhuertos phpLDAPadmin ajax_functions.js makeHttpRequest request smuggling
- CVE-2016-15038 NUUO NVRmini 2 deletefile.php path traversal
- CVE-2016-15037 go4rayyan Scumblr Task cross site scripting
- CVE-2016-15036 Deis Workflow Manager race condition
- CVE-2016-15035 Doc2k RE-Chat re_chat.js cross site scripting
- CVE-2016-15034 Dynacase Webdesk freedomrss_search.php freedomrss_search sql injection
- CVE-2016-15033 Delete All Comments <= 2.0 - Arbitrary File Upload
- CVE-2016-15032 mback2k mh_httpbl Extension class.tx_mhhttpbl.php stopOutput cross site scripting
- CVE-2016-15031 PHP-Login POST Parameter class.loginscript.php checkLogin sql injection
- CVE-2016-15030 Arno0x TwoFactorAuth login.php redirect
- CVE-2016-1503 Memory corruption in dhcpcd project:dhcpcd
- CVE-2016-15029 Ydalb mapicoin stats.php cross site scripting
- CVE-2016-15028 ICEPAY REST-API-NET Checksum Validation RestClient.cs RestClient integrity check
- CVE-2016-15027 meta4creations Post Duplicator Plugin notices.php mtphr_post_duplicator_notice cross site scripting
- CVE-2016-15026 3breadt dd-plist xml external entity reference
- CVE-2016-15025 generator-hottowel 404 Error _app.js cross site scripting
- CVE-2016-15024 doomsider shadow denial of service
- CVE-2016-15023 SiteFusion Application Server Extension getextension.php path traversal
- CVE-2016-15022 mosbth cimage check_system.php cross site scripting
- CVE-2016-15021 nickzren alsdb sql injection
- CVE-2016-15020 liftkit database Query.php processOrderBy sql injection
- CVE-2016-1502 Auth bypass in netapp:snapcenter server
- CVE-2016-15019 tombh jekbox server.rb exposure of information through directory listing
- CVE-2016-15018 krail-jpa sql injection
- CVE-2016-15017 fabarea media_upload UploadFileService.php getUploadedFileList pathname traversal
- CVE-2016-15016 mrtnmtth joomla_mod_einsatz_stats helper.php getStatsByType sql injection
- CVE-2016-15015 viafintech Barzahlen Payment Module PHP SDK Webhook.php verify timing discrepancy
- CVE-2016-15014 CESNET theme-cesnet resetpassword.php insufficiently protected credentials
- CVE-2016-15013 ForumHulp searchresults listener.php list_keywords sql injection
- CVE-2016-15012 forcedotcom SalesforceMobileSDK-Windows QuerySpec.cs ComputeCountSql sql injection
- CVE-2016-15011 e-Contract dssp SignResponseVerifier.java checkSignResponse xml external entity reference
- CVE-2016-15010 University of Cambridge django-ucamlookup Lookup cross site scripting
- CVE-2016-1501 Information disclosure in owncloud:owncloud
- CVE-2016-15009 OpenACS bug-tracker Search nav-bar.adp cross-site request forgery
- CVE-2016-15008 oxguy3 coebot-www channel.js showChannelBoir cross site scripting
- CVE-2016-15007 Centralized-Salesforce-Dev-Framework SOQL SObjectService.cls SObjectService injection
- CVE-2016-15006 enigmaX Scrambling Table main.c getSeed prng seed
- CVE-2016-15005 Cryptographically weak random number generation in github.com/dinever/golf
- CVE-2016-15004 InfiniteWP Client Plugin injection
- CVE-2016-15003 FileZilla Client Installer uninstall.exe unquoted search path
- CVE-2016-15002 MONyog Ultimate Cookie privileges management
- CVE-2016-1500 Information disclosure in owncloud:owncloud
- CVE-2016-1499 Information disclosure in owncloud:owncloud
- CVE-2016-1498 Cross-site scripting in owncloud:owncloud
- CVE-2016-1497 Information disclosure in f5:big-ip access policy manager
- CVE-2016-1496 Denial of service in huawei:p8 firmware
- CVE-2016-1495 Integer overflow in huawei:mate s firmware
- CVE-2016-1494 Python RSA allows attackers to spoof signatures