# Vulnerabilities published in 2016 - [CVE-2016-9191](https://insights.sbomify.com/CVE-2016-9191/): Denial of service in n/a (medium 5.5) - [CVE-2016-9190](https://insights.sbomify.com/CVE-2016-9190/): Arbitrary code using "crafted image file" approach affecting Pillow (high 7.8) - [CVE-2016-9189](https://insights.sbomify.com/CVE-2016-9189/): Pillow Integer overflow in Map.c (medium 5.5) - [CVE-2016-9188](https://insights.sbomify.com/CVE-2016-9188/): Moodle XSS Vulnerability (medium 6.1) - [CVE-2016-9187](https://insights.sbomify.com/CVE-2016-9187/): Moodle Unrestricted file upload vulnerability (high 8.8) - [CVE-2016-9186](https://insights.sbomify.com/CVE-2016-9186/): File upload in n/a (high 8.8) - [CVE-2016-9185](https://insights.sbomify.com/CVE-2016-9185/): Server-side request forgery in n/a (medium 4.3) - [CVE-2016-9184](https://insights.sbomify.com/CVE-2016-9184/): SQL injection in n/a (high 7.5) - [CVE-2016-9183](https://insights.sbomify.com/CVE-2016-9183/): SQL injection in n/a (high 7.5) - [CVE-2016-9182](https://insights.sbomify.com/CVE-2016-9182/): Auth bypass in n/a (high 7.5) - [CVE-2016-9181](https://insights.sbomify.com/CVE-2016-9181/): XML external entity in n/a (high 7.1) - [CVE-2016-9180](https://insights.sbomify.com/CVE-2016-9180/): XML external entity in n/a (critical 9.1) - [CVE-2016-9179](https://insights.sbomify.com/CVE-2016-9179/): Server-side request forgery in n/a (high 7.5) - [CVE-2016-9178](https://insights.sbomify.com/CVE-2016-9178/): Information disclosure in n/a (medium 5.5) - [CVE-2016-9177](https://insights.sbomify.com/CVE-2016-9177/): Spark allows remote attackers to read arbitrary files via a .. (dot dot) in the URI (high 7.5) - [CVE-2016-9176](https://insights.sbomify.com/CVE-2016-9176/): Memory corruption in Micro Focus Rumba 9.4 (critical 9.8) - [CVE-2016-9169](https://insights.sbomify.com/CVE-2016-9169/): Cross-site scripting in Novell GroupWise (medium 6.1) - [CVE-2016-9168](https://insights.sbomify.com/CVE-2016-9168/): Security feature bypass in Novell eDirectory (medium 6.5) - [CVE-2016-9167](https://insights.sbomify.com/CVE-2016-9167/): Privilege escalation in Novell eDirectory (high 7.5) - [CVE-2016-9166](https://insights.sbomify.com/CVE-2016-9166/): Security feature bypass in NetIQ eDirectory (high 7.5) - [CVE-2016-9165](https://insights.sbomify.com/CVE-2016-9165/): Information disclosure in n/a (high 7.5) - [CVE-2016-9164](https://insights.sbomify.com/CVE-2016-9164/): Path traversal in n/a (high 7.5) - [CVE-2016-9160](https://insights.sbomify.com/CVE-2016-9160/): Information disclosure in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC PCS 7 (All versions < SIMATIC PCS 7 V8.0 SP1) (high 8.1) - [CVE-2016-9159](https://insights.sbomify.com/CVE-2016-9159/): Information disclosure in SIMATIC S7-300 CPU family (medium 5.9) - [CVE-2016-9158](https://insights.sbomify.com/CVE-2016-9158/): Denial of service in SIMATIC S7-300 CPU family (high 7.5) - [CVE-2016-9157](https://insights.sbomify.com/CVE-2016-9157/): Denial of service in Siemens SICAM PAS through V8.08 (critical 9.8) - [CVE-2016-9156](https://insights.sbomify.com/CVE-2016-9156/): Path traversal in Siemens SICAM PAS through V8.08 (high 7.3) - [CVE-2016-9155](https://insights.sbomify.com/CVE-2016-9155/): Information disclosure in SIEMENS-branded IP Cameras (critical 9.8) - [CVE-2016-9154](https://insights.sbomify.com/CVE-2016-9154/): Weak cryptography in Desigo PX Web modules with all firmware versions < V6.00.046 (high 7.5) - [CVE-2016-9152](https://insights.sbomify.com/CVE-2016-9152/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-9151](https://insights.sbomify.com/CVE-2016-9151/): Privilege escalation in n/a (high 7.8) - [CVE-2016-9150](https://insights.sbomify.com/CVE-2016-9150/): Memory corruption in n/a (critical 9.8) - [CVE-2016-9149](https://insights.sbomify.com/CVE-2016-9149/): Code injection in n/a (medium 6.5) - [CVE-2016-9148](https://insights.sbomify.com/CVE-2016-9148/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-9147](https://insights.sbomify.com/CVE-2016-9147/): Denial of service in n/a (high 7.5) - [CVE-2016-9139](https://insights.sbomify.com/CVE-2016-9139/): Cross-site scripting in n/a (medium 6.1) - [CVE-2016-9138](https://insights.sbomify.com/CVE-2016-9138/): Use after free in n/a (critical 9.8) - [CVE-2016-9137](https://insights.sbomify.com/CVE-2016-9137/): Use after free in n/a (critical 9.8) - [CVE-2016-9136](https://insights.sbomify.com/CVE-2016-9136/): Information disclosure in n/a (high 7.5) - [CVE-2016-9135](https://insights.sbomify.com/CVE-2016-9135/): SQL injection in n/a (high 7.5) - [CVE-2016-9134](https://insights.sbomify.com/CVE-2016-9134/): SQL injection in n/a (high 7.5) - [CVE-2016-9132](https://insights.sbomify.com/CVE-2016-9132/): Integer overflow in n/a (critical 9.8) - [CVE-2016-9131](https://insights.sbomify.com/CVE-2016-9131/): Denial of service in n/a (high 7.5) - [CVE-2016-9130](https://insights.sbomify.com/CVE-2016-9130/): Cross-site scripting in Revive Adserver All versions before 3.2.3 (medium 5.4) - [CVE-2016-9129](https://insights.sbomify.com/CVE-2016-9129/): Information disclosure in Revive Adserver All versions before 3.2.3 (medium 5.3) - [CVE-2016-9128](https://insights.sbomify.com/CVE-2016-9128/): Cross-site scripting in Revive Adserver All versions before 3.2.3 (medium 5.4) - [CVE-2016-9127](https://insights.sbomify.com/CVE-2016-9127/): Cross-site request forgery in Revive Adserver All versions before 3.2.3 (high 8.8) - [CVE-2016-9126](https://insights.sbomify.com/CVE-2016-9126/): Cross-site scripting in Revive Adserver All versions before 3.2.3 (medium 5.4) - [CVE-2016-9125](https://insights.sbomify.com/CVE-2016-9125/): Auth bypass in Revive Adserver All versions before 3.2.3 (critical 9.8) - [CVE-2016-9124](https://insights.sbomify.com/CVE-2016-9124/): Security feature bypass in Revive Adserver All versions before 3.2.3 (critical 9.8) - [CVE-2016-9123](https://insights.sbomify.com/CVE-2016-9123/): Integer Overflow in go-jose (high 7.5) - [CVE-2016-9122](https://insights.sbomify.com/CVE-2016-9122/): Go JOSE Signature Validation Bypass (high 7.5) - [CVE-2016-9121](https://insights.sbomify.com/CVE-2016-9121/): Elliptic Curve Key Disclosure in go-jose (critical 9.1) - [CVE-2016-9120](https://insights.sbomify.com/CVE-2016-9120/): Race condition in n/a (high 7.8) - [CVE-2016-9119](https://insights.sbomify.com/CVE-2016-9119/): MoinMoin Cross-site Scripting (XSS) vulnerability (medium 6.1) - [CVE-2016-9118](https://insights.sbomify.com/CVE-2016-9118/): Memory corruption in n/a (medium 5.3) - [CVE-2016-9117](https://insights.sbomify.com/CVE-2016-9117/): Null dereference in n/a (medium 6.5) - [CVE-2016-9116](https://insights.sbomify.com/CVE-2016-9116/): Null dereference in n/a (medium 6.5) - [CVE-2016-9115](https://insights.sbomify.com/CVE-2016-9115/): Memory corruption in n/a (medium 6.5) - [CVE-2016-9114](https://insights.sbomify.com/CVE-2016-9114/): Null dereference in n/a (high 7.5) - [CVE-2016-9113](https://insights.sbomify.com/CVE-2016-9113/): Null dereference in n/a (high 7.5) - [CVE-2016-9112](https://insights.sbomify.com/CVE-2016-9112/): Denial of service in n/a (high 7.5) - [CVE-2016-9111](https://insights.sbomify.com/CVE-2016-9111/): Auth bypass in n/a (medium 6.8) - [CVE-2016-9109](https://insights.sbomify.com/CVE-2016-9109/): Denial of service in n/a (high 7.5) - [CVE-2016-9108](https://insights.sbomify.com/CVE-2016-9108/): Integer overflow in n/a (high 7.5) - [CVE-2016-9107](https://insights.sbomify.com/CVE-2016-9107/): Information disclosure in n/a (high 7.5) - [CVE-2016-9106](https://insights.sbomify.com/CVE-2016-9106/): Denial of service in n/a (medium 6.0) - [CVE-2016-9105](https://insights.sbomify.com/CVE-2016-9105/): Denial of service in n/a (medium 6.0) - [CVE-2016-9104](https://insights.sbomify.com/CVE-2016-9104/): Integer overflow in n/a (medium 4.4) - [CVE-2016-9103](https://insights.sbomify.com/CVE-2016-9103/): Information disclosure in n/a (medium 6.0) - [CVE-2016-9102](https://insights.sbomify.com/CVE-2016-9102/): Denial of service in n/a (medium 6.0) - [CVE-2016-9101](https://insights.sbomify.com/CVE-2016-9101/): Denial of service in n/a (medium 6.0) - [CVE-2016-9100](https://insights.sbomify.com/CVE-2016-9100/): Information disclosure in ASG (high 7.8) - [CVE-2016-9099](https://insights.sbomify.com/CVE-2016-9099/): Open redirect in ASG (medium 6.1) - [CVE-2016-9097](https://insights.sbomify.com/CVE-2016-9097/): Missing authorization in Symantec Advanced Secure Gateway (ASG) and ProxySG (high 7.2) - [CVE-2016-9094](https://insights.sbomify.com/CVE-2016-9094/): Code injection in Endpoint Protection (high 7.8) - [CVE-2016-9093](https://insights.sbomify.com/CVE-2016-9093/): Privilege escalation in Endpoint Protection (high 7.0) - [CVE-2016-9092](https://insights.sbomify.com/CVE-2016-9092/): Cross-site request forgery in Content Analysis (CA) (high 8.8) - [CVE-2016-9091](https://insights.sbomify.com/CVE-2016-9091/): Command injection in Blue Coat ASG (high 7.2) - [CVE-2016-9087](https://insights.sbomify.com/CVE-2016-9087/): SQL injection in n/a (critical 9.8) - [CVE-2016-9086](https://insights.sbomify.com/CVE-2016-9086/): Path traversal in n/a (medium 6.5) - [CVE-2016-9085](https://insights.sbomify.com/CVE-2016-9085/): Integer overflow in n/a (low 3.3) - [CVE-2016-9084](https://insights.sbomify.com/CVE-2016-9084/): Integer overflow in n/a (high 7.8) - [CVE-2016-9083](https://insights.sbomify.com/CVE-2016-9083/): Integer overflow in n/a (high 7.8) - [CVE-2016-9082](https://insights.sbomify.com/CVE-2016-9082/): Integer overflow in n/a (medium 5.5) - [CVE-2016-9081](https://insights.sbomify.com/CVE-2016-9081/): Business logic in n/a (critical 9.8) - [CVE-2016-9080](https://insights.sbomify.com/CVE-2016-9080/): Memory corruption in Firefox (critical 9.8) - [CVE-2016-9079](https://insights.sbomify.com/CVE-2016-9079/): Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free (high 7.5, exploited in the wild) - [CVE-2016-9078](https://insights.sbomify.com/CVE-2016-9078/): Open redirect in Firefox (high 8.8) - [CVE-2016-9077](https://insights.sbomify.com/CVE-2016-9077/): Information disclosure in Firefox (high 7.0) - [CVE-2016-9076](https://insights.sbomify.com/CVE-2016-9076/): Other in Firefox (medium 5.9) - [CVE-2016-9075](https://insights.sbomify.com/CVE-2016-9075/): Privilege escalation in Firefox (critical 9.8) - [CVE-2016-9074](https://insights.sbomify.com/CVE-2016-9074/): Information disclosure in Firefox (medium 5.9) - [CVE-2016-9073](https://insights.sbomify.com/CVE-2016-9073/): Security feature bypass in Firefox (high 7.5) - [CVE-2016-9072](https://insights.sbomify.com/CVE-2016-9072/): Security feature bypass in Firefox (high 7.5) - [CVE-2016-9071](https://insights.sbomify.com/CVE-2016-9071/): Information disclosure in Firefox (medium 5.3) - [CVE-2016-9070](https://insights.sbomify.com/CVE-2016-9070/): Security feature bypass in Firefox (high 8.0) - [CVE-2016-9069](https://insights.sbomify.com/CVE-2016-9069/): Use after free in Firefox (high 7.8) - [CVE-2016-9068](https://insights.sbomify.com/CVE-2016-9068/): Use after free in Firefox (high 7.5) - [CVE-2016-9067](https://insights.sbomify.com/CVE-2016-9067/): Use after free in Firefox (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2016/page/7/