# Vulnerabilities published in 2016


- [CVE-2016-1493](https://insights.sbomify.com/CVE-2016-1493/): Weak cryptography in intel:driver update utility (high 7.5)
- [CVE-2016-1492](https://insights.sbomify.com/CVE-2016-1492/): Auth bypass in lenovo:shareit (medium 6.1)
- [CVE-2016-1491](https://insights.sbomify.com/CVE-2016-1491/): Hardcoded credentials in lenovo:shareit (high 8.8)
- [CVE-2016-1490](https://insights.sbomify.com/CVE-2016-1490/): Information disclosure in lenovo:shareit (medium 4.1)
- [CVE-2016-1489](https://insights.sbomify.com/CVE-2016-1489/): Weak cryptography in lenovo:shareit (high 8.0)
- [CVE-2016-1488](https://insights.sbomify.com/CVE-2016-1488/): Cross-site scripting in siemens:ozw672 firmware (medium 6.1)
- [CVE-2016-1487](https://insights.sbomify.com/CVE-2016-1487/): Deserialization in lexmark:markvision enterprise (high 8.8)
- [CVE-2016-1486](https://insights.sbomify.com/CVE-2016-1486/): Denial of service in Cisco AsyncOS through 9.7.1-066 (high 7.5)
- [CVE-2016-1485](https://insights.sbomify.com/CVE-2016-1485/): Cross-site scripting in cisco:identity services engine software (medium 6.1)
- [CVE-2016-1484](https://insights.sbomify.com/CVE-2016-1484/): Information disclosure in cisco:webex meetings server (high 7.5)
- [CVE-2016-1483](https://insights.sbomify.com/CVE-2016-1483/): Denial of service in cisco:webex meetings server (high 7.5)
- [CVE-2016-1482](https://insights.sbomify.com/CVE-2016-1482/): Command injection in cisco:webex meetings server (high 8.1)
- [CVE-2016-1481](https://insights.sbomify.com/CVE-2016-1481/): Denial of service in Cisco AsyncOS through 9.7.0-125 (high 7.5)
- [CVE-2016-1480](https://insights.sbomify.com/CVE-2016-1480/): Security feature bypass in Cisco AsyncOS through WSA10.0.0-000 (high 7.5)
- [CVE-2016-1479](https://insights.sbomify.com/CVE-2016-1479/): Memory corruption in cisco:ip phone 8800 series firmware (high 7.5)
- [CVE-2016-1478](https://insights.sbomify.com/CVE-2016-1478/): Denial of service in cisco:ios (high 7.5)
- [CVE-2016-1477](https://insights.sbomify.com/CVE-2016-1477/): Information disclosure in cisco:connected streaming analytics (medium 6.5)
- [CVE-2016-1476](https://insights.sbomify.com/CVE-2016-1476/): Cross-site scripting in cisco:ip phone 8800 series firmware (medium 5.4)
- [CVE-2016-1474](https://insights.sbomify.com/CVE-2016-1474/): Other in cisco:prime infrastructure (medium 4.3)
- [CVE-2016-1473](https://insights.sbomify.com/CVE-2016-1473/): Hardcoded credentials in cisco:small business 220 series smart plus switches (critical 9.8)
- [CVE-2016-1472](https://insights.sbomify.com/CVE-2016-1472/): Denial of service in cisco:small business 220 series smart plus switches (high 7.5)
- [CVE-2016-1471](https://insights.sbomify.com/CVE-2016-1471/): Cross-site scripting in cisco:small business 220 series smart plus switches (medium 6.1)
- [CVE-2016-1470](https://insights.sbomify.com/CVE-2016-1470/): Cross-site request forgery in cisco:small business 220 series smart plus switches (high 8.8)
- [CVE-2016-1469](https://insights.sbomify.com/CVE-2016-1469/): Denial of service in cisco:spa300 firmware (high 7.5)
- [CVE-2016-1468](https://insights.sbomify.com/CVE-2016-1468/): Command injection in cisco:telepresence video communication server (high 8.8)
- [CVE-2016-1467](https://insights.sbomify.com/CVE-2016-1467/): Denial of service in cisco:videoscape session resource manager (medium 6.5)
- [CVE-2016-1466](https://insights.sbomify.com/CVE-2016-1466/): Denial of service in cisco:unified communications manager im and presence service (high 7.5)
- [CVE-2016-1465](https://insights.sbomify.com/CVE-2016-1465/): Memory corruption in cisco:nx-os (medium 6.5)
- [CVE-2016-1464](https://insights.sbomify.com/CVE-2016-1464/): Memory corruption in cisco:webex wrf player t29 (high 7.8)
- [CVE-2016-1463](https://insights.sbomify.com/CVE-2016-1463/): Security feature bypass in cisco:firesight system software (high 7.5)
- [CVE-2016-1462](https://insights.sbomify.com/CVE-2016-1462/): Cross-site scripting in cisco:prime service catalog (medium 6.1)
- [CVE-2016-1461](https://insights.sbomify.com/CVE-2016-1461/): Security feature bypass in cisco:asyncos (high 7.5)
- [CVE-2016-1460](https://insights.sbomify.com/CVE-2016-1460/): Denial of service in cisco:wireless lan controller software (medium 6.5)
- [CVE-2016-1459](https://insights.sbomify.com/CVE-2016-1459/): Denial of service in cisco:ios (medium 5.3)
- [CVE-2016-1458](https://insights.sbomify.com/CVE-2016-1458/): Privilege escalation in cisco:secure firewall management center (high 8.8)
- [CVE-2016-1457](https://insights.sbomify.com/CVE-2016-1457/): Command injection in cisco:secure firewall management center (high 8.8)
- [CVE-2016-1456](https://insights.sbomify.com/CVE-2016-1456/): Privilege escalation in cisco:ios xr (high 7.8)
- [CVE-2016-1455](https://insights.sbomify.com/CVE-2016-1455/): Misconfiguration in cisco:nx-os (high 7.5)
- [CVE-2016-1454](https://insights.sbomify.com/CVE-2016-1454/): Denial of service in cisco:nx-os (medium 6.5)
- [CVE-2016-1453](https://insights.sbomify.com/CVE-2016-1453/): Memory corruption in cisco:nx-os (critical 9.8)
- [CVE-2016-1452](https://insights.sbomify.com/CVE-2016-1452/): Missing authorization in cisco:asr 5000 (medium 6.5)
- [CVE-2016-1451](https://insights.sbomify.com/CVE-2016-1451/): Cross-site scripting in cisco:meeting server (medium 6.1)
- [CVE-2016-1450](https://insights.sbomify.com/CVE-2016-1450/): Command injection in cisco:webex meetings server (high 7.5)
- [CVE-2016-1449](https://insights.sbomify.com/CVE-2016-1449/): Cross-site scripting in cisco:webex meetings server (medium 6.1)
- [CVE-2016-1448](https://insights.sbomify.com/CVE-2016-1448/): Cross-site request forgery in cisco:webex meetings server (high 8.8)
- [CVE-2016-1447](https://insights.sbomify.com/CVE-2016-1447/): Cross-site scripting in cisco:webex meetings server (medium 6.1)
- [CVE-2016-1446](https://insights.sbomify.com/CVE-2016-1446/): SQL injection in cisco:webex meetings server (high 8.8)
- [CVE-2016-1445](https://insights.sbomify.com/CVE-2016-1445/): Security feature bypass in cisco:adaptive security appliance software (medium 5.3)
- [CVE-2016-1444](https://insights.sbomify.com/CVE-2016-1444/): Auth bypass in cisco:telepresence video communication server (medium 6.5)
- [CVE-2016-1443](https://insights.sbomify.com/CVE-2016-1443/): Security feature bypass in cisco:amp threat grid appliance (high 8.1)
- [CVE-2016-1442](https://insights.sbomify.com/CVE-2016-1442/): Command injection in cisco:prime infrastructure (high 8.8)
- [CVE-2016-1441](https://insights.sbomify.com/CVE-2016-1441/): Security feature bypass in cisco:cloud network automation provisioner (high 8.2)
- [CVE-2016-1440](https://insights.sbomify.com/CVE-2016-1440/): Denial of service in cisco:web security appliance (medium 5.3)
- [CVE-2016-1439](https://insights.sbomify.com/CVE-2016-1439/): Cross-site scripting in cisco:unified contact center enterprise (medium 6.1)
- [CVE-2016-1438](https://insights.sbomify.com/CVE-2016-1438/): Security feature bypass in cisco:asyncos (high 7.5)
- [CVE-2016-1437](https://insights.sbomify.com/CVE-2016-1437/): SQL injection in cisco:prime collaboration deployment (medium 6.5)
- [CVE-2016-1436](https://insights.sbomify.com/CVE-2016-1436/): Memory corruption in cisco:asr 5000 software (high 7.5)
- [CVE-2016-1435](https://insights.sbomify.com/CVE-2016-1435/): Security feature bypass in cisco:ip phone 8800 series firmware (high 7.0)
- [CVE-2016-1434](https://insights.sbomify.com/CVE-2016-1434/): Path traversal in cisco:ip phone 8800 series firmware (medium 6.5)
- [CVE-2016-1433](https://insights.sbomify.com/CVE-2016-1433/): Denial of service in cisco:ios xr (medium 5.3)
- [CVE-2016-1432](https://insights.sbomify.com/CVE-2016-1432/): Null dereference in cisco:ios xe (medium 6.5)
- [CVE-2016-1431](https://insights.sbomify.com/CVE-2016-1431/): Cross-site scripting in cisco:secure firewall management center (medium 6.1)
- [CVE-2016-1430](https://insights.sbomify.com/CVE-2016-1430/): Command injection in cisco:rv180 vpn router firmware (high 8.8)
- [CVE-2016-1429](https://insights.sbomify.com/CVE-2016-1429/): Path traversal in cisco:rv180 vpn router firmware (high 7.5)
- [CVE-2016-1428](https://insights.sbomify.com/CVE-2016-1428/): Memory corruption in cisco:ios xe (medium 6.5)
- [CVE-2016-1427](https://insights.sbomify.com/CVE-2016-1427/): Information disclosure in cisco:prime network registrar (high 7.5)
- [CVE-2016-1426](https://insights.sbomify.com/CVE-2016-1426/): Denial of service in cisco:ios xr (high 7.5)
- [CVE-2016-1425](https://insights.sbomify.com/CVE-2016-1425/): Memory corruption in cisco:ios (medium 6.5)
- [CVE-2016-1424](https://insights.sbomify.com/CVE-2016-1424/): Memory corruption in cisco:ios (medium 6.5)
- [CVE-2016-1423](https://insights.sbomify.com/CVE-2016-1423/): Cross-site scripting in Cisco AsyncOS 8.0.2-069 (medium 6.1)
- [CVE-2016-1421](https://insights.sbomify.com/CVE-2016-1421/): Memory corruption in Cisco IP Phones (high 7.5)
- [CVE-2016-1420](https://insights.sbomify.com/CVE-2016-1420/): Privilege escalation in cisco:application infrastructure controller (high 7.8)
- [CVE-2016-1419](https://insights.sbomify.com/CVE-2016-1419/): Denial of service in cisco:aironet access point software (high 8.1)
- [CVE-2016-1418](https://insights.sbomify.com/CVE-2016-1418/): Command injection in cisco:aironet access point software (high 7.8)
- [CVE-2016-1417](https://insights.sbomify.com/CVE-2016-1417/): Other in snort:snort (high 8.8)
- [CVE-2016-1416](https://insights.sbomify.com/CVE-2016-1416/): Auth bypass in cisco:prime collaboration provisioning (critical 9.8)
- [CVE-2016-1415](https://insights.sbomify.com/CVE-2016-1415/): Denial of service in cisco:webex wrf player t29 (medium 5.5)
- [CVE-2016-1413](https://insights.sbomify.com/CVE-2016-1413/): Code injection in cisco:secure firewall management center (medium 6.5)
- [CVE-2016-1411](https://insights.sbomify.com/CVE-2016-1411/): Weak cryptography in Cisco AsyncOS (medium 5.9)
- [CVE-2016-1410](https://insights.sbomify.com/CVE-2016-1410/): Information disclosure in cisco:webex meeting center (high 7.5)
- [CVE-2016-1409](https://insights.sbomify.com/CVE-2016-1409/): Denial of service in cisco:ios (high 7.5)
- [CVE-2016-1408](https://insights.sbomify.com/CVE-2016-1408/): Command injection in cisco:evolved programmable network manager (high 8.8)
- [CVE-2016-1407](https://insights.sbomify.com/CVE-2016-1407/): Denial of service in cisco:ios xr (high 7.5)
- [CVE-2016-1406](https://insights.sbomify.com/CVE-2016-1406/): Privilege escalation in cisco:evolved programmable network manager (high 8.8)
- [CVE-2016-1405](https://insights.sbomify.com/CVE-2016-1405/): Memory corruption in cisco:email security appliance (high 7.5)
- [CVE-2016-1404](https://insights.sbomify.com/CVE-2016-1404/): Hardcoded credentials in cisco:ucs invicta c3124sa appliance (high 7.5)
- [CVE-2016-1403](https://insights.sbomify.com/CVE-2016-1403/): Command injection in cisco:ip phone 8800 series firmware (high 7.8)
- [CVE-2016-1402](https://insights.sbomify.com/CVE-2016-1402/): Denial of service in cisco:identity services engine software (high 7.5)
- [CVE-2016-1401](https://insights.sbomify.com/CVE-2016-1401/): Cross-site scripting in cisco:unified computing system central software (medium 6.1)
- [CVE-2016-1400](https://insights.sbomify.com/CVE-2016-1400/): Denial of service in cisco:telepresence video communication server (high 7.5)
- [CVE-2016-1399](https://insights.sbomify.com/CVE-2016-1399/): Denial of service in cisco:ios (high 7.5)
- [CVE-2016-1398](https://insights.sbomify.com/CVE-2016-1398/): Memory corruption in cisco:rv110w firmware (medium 6.5)
- [CVE-2016-1397](https://insights.sbomify.com/CVE-2016-1397/): Memory corruption in cisco:rv110w wireless-n vpn firewall firmware (medium 6.5)
- [CVE-2016-1396](https://insights.sbomify.com/CVE-2016-1396/): Cross-site scripting in cisco:rv110w wireless-n vpn firewall firmware (medium 6.1)
- [CVE-2016-1395](https://insights.sbomify.com/CVE-2016-1395/): Code injection in cisco:rv110w wireless-n vpn firewall firmware (critical 9.8)
- [CVE-2016-1394](https://insights.sbomify.com/CVE-2016-1394/): Hardcoded credentials in cisco:firesight system software (high 8.6)
- [CVE-2016-1393](https://insights.sbomify.com/CVE-2016-1393/): SQL injection in cisco:cloud network automation provisioner (high 7.1)
- [CVE-2016-1392](https://insights.sbomify.com/CVE-2016-1392/): Open redirect in cisco:prime collaboration assurance (high 7.4)
- [CVE-2016-1391](https://insights.sbomify.com/CVE-2016-1391/): Command injection in cisco:prime network analysis module software (high 8.8)
- [CVE-2016-1390](https://insights.sbomify.com/CVE-2016-1390/): Privilege escalation in cisco:prime network analysis module software (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/70/