# Vulnerabilities published in 2016


- [CVE-2016-1287](https://insights.sbomify.com/CVE-2016-1287/): Memory corruption in cisco:adaptive security appliance software (critical 9.8)
- [CVE-2016-1286](https://insights.sbomify.com/CVE-2016-1286/): Denial of service in canonical:ubuntu linux (high 8.6)
- [CVE-2016-1285](https://insights.sbomify.com/CVE-2016-1285/): Denial of service in canonical:ubuntu linux (medium 6.8)
- [CVE-2016-1284](https://insights.sbomify.com/CVE-2016-1284/): Denial of service in isc:bind (medium 5.9)
- [CVE-2016-1283](https://insights.sbomify.com/CVE-2016-1283/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2016-1281](https://insights.sbomify.com/CVE-2016-1281/): Other in idrix:truecrypt (high 7.8)
- [CVE-2016-1280](https://insights.sbomify.com/CVE-2016-1280/): Security feature bypass in juniper:junos (medium 6.5)
- [CVE-2016-1279](https://insights.sbomify.com/CVE-2016-1279/): Auth bypass in juniper:junos (critical 9.8)
- [CVE-2016-1278](https://insights.sbomify.com/CVE-2016-1278/): Auth bypass in juniper:junos (high 7.8)
- [CVE-2016-1277](https://insights.sbomify.com/CVE-2016-1277/): Denial of service in juniper:junos (medium 5.9)
- [CVE-2016-1276](https://insights.sbomify.com/CVE-2016-1276/): Denial of service in juniper:junos (medium 5.9)
- [CVE-2016-1275](https://insights.sbomify.com/CVE-2016-1275/): Information disclosure in juniper:junos (medium 6.5)
- [CVE-2016-1274](https://insights.sbomify.com/CVE-2016-1274/): Denial of service in juniper:junos (high 7.5)
- [CVE-2016-1273](https://insights.sbomify.com/CVE-2016-1273/): Weak cryptography in juniper:junos (medium 5.9)
- [CVE-2016-1271](https://insights.sbomify.com/CVE-2016-1271/): Privilege escalation in juniper:junos (high 7.8)
- [CVE-2016-1270](https://insights.sbomify.com/CVE-2016-1270/): Denial of service in juniper:junos (high 7.5)
- [CVE-2016-1269](https://insights.sbomify.com/CVE-2016-1269/): Denial of service in juniper:junos (high 7.5)
- [CVE-2016-1268](https://insights.sbomify.com/CVE-2016-1268/): Denial of service in juniper:screenos (high 7.5)
- [CVE-2016-1267](https://insights.sbomify.com/CVE-2016-1267/): Race condition in juniper:junos (medium 6.7)
- [CVE-2016-1265](https://insights.sbomify.com/CVE-2016-1265/): Junos Space: privilege escalation vulnerabilities in Junos Space (critical 9.8)
- [CVE-2016-1264](https://insights.sbomify.com/CVE-2016-1264/): Race condition in juniper:junos (high 8.8)
- [CVE-2016-1263](https://insights.sbomify.com/CVE-2016-1263/): Denial of service in juniper:junos (high 7.5)
- [CVE-2016-1262](https://insights.sbomify.com/CVE-2016-1262/): Denial of service in juniper:junos (medium 5.9)
- [CVE-2016-1261](https://insights.sbomify.com/CVE-2016-1261/): Junos: vulnerabilities in J-Web (CVE-2016-1261) (high 7.1)
- [CVE-2016-1260](https://insights.sbomify.com/CVE-2016-1260/): Denial of service in juniper:junos (medium 5.3)
- [CVE-2016-1258](https://insights.sbomify.com/CVE-2016-1258/): Denial of service in juniper:junos (medium 5.3)
- [CVE-2016-1257](https://insights.sbomify.com/CVE-2016-1257/): Denial of service in juniper:junos (medium 5.9)
- [CVE-2016-1256](https://insights.sbomify.com/CVE-2016-1256/): Denial of service in juniper:junos (medium 5.3)
- [CVE-2016-1255](https://insights.sbomify.com/CVE-2016-1255/): Privilege escalation in debian:postgresql-common (high 7.8)
- [CVE-2016-1254](https://insights.sbomify.com/CVE-2016-1254/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2016-1253](https://insights.sbomify.com/CVE-2016-1253/): Command injection in debian:most (critical 9.8)
- [CVE-2016-1252](https://insights.sbomify.com/CVE-2016-1252/): Security feature bypass in canonical:ubuntu linux (medium 5.9)
- [CVE-2016-1251](https://insights.sbomify.com/CVE-2016-1251/): Use after free in DBD::mysql before 4.041 (high 8.1)
- [CVE-2016-1249](https://insights.sbomify.com/CVE-2016-1249/): Memory corruption in dbd-mysql project:dbd-mysql (medium 5.9)
- [CVE-2016-1248](https://insights.sbomify.com/CVE-2016-1248/): Code injection in vim before patch 8.0.0056 (high 7.8)
- [CVE-2016-1247](https://insights.sbomify.com/CVE-2016-1247/): Privilege escalation in f5:nginx (high 7.8)
- [CVE-2016-1246](https://insights.sbomify.com/CVE-2016-1246/): Memory corruption in dbd-mysql project:dbd-mysql (high 7.5)
- [CVE-2016-1245](https://insights.sbomify.com/CVE-2016-1245/): Memory corruption in Quagga before 1.0.20161017 (critical 9.8)
- [CVE-2016-1244](https://insights.sbomify.com/CVE-2016-1244/): Command injection in debian:debian linux (high 8.8)
- [CVE-2016-1243](https://insights.sbomify.com/CVE-2016-1243/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2016-1242](https://insights.sbomify.com/CVE-2016-1242/): Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter (medium 4.4)
- [CVE-2016-1241](https://insights.sbomify.com/CVE-2016-1241/): Tryton allows users to read the hashed password (medium 5.3)
- [CVE-2016-1240](https://insights.sbomify.com/CVE-2016-1240/): Privilege escalation in apache:tomcat (high 7.8)
- [CVE-2016-1239](https://insights.sbomify.com/CVE-2016-1239/): Code injection in duck (critical 9.8)
- [CVE-2016-1238](https://insights.sbomify.com/CVE-2016-1238/): Privilege escalation in apache:spamassassin (high 7.8)
- [CVE-2016-1237](https://insights.sbomify.com/CVE-2016-1237/): Security feature bypass in linux:linux kernel (medium 5.5)
- [CVE-2016-1236](https://insights.sbomify.com/CVE-2016-1236/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2016-1235](https://insights.sbomify.com/CVE-2016-1235/): Privilege escalation in debian:debian linux (high 8.8)
- [CVE-2016-1234](https://insights.sbomify.com/CVE-2016-1234/): Memory corruption in fedoraproject:fedora (high 7.5)
- [CVE-2016-1233](https://insights.sbomify.com/CVE-2016-1233/): Misconfiguration in debian:fuse (high 7.8)
- [CVE-2016-1232](https://insights.sbomify.com/CVE-2016-1232/): Weak cryptography in debian:debian linux (high 7.5)
- [CVE-2016-1231](https://insights.sbomify.com/CVE-2016-1231/): Path traversal in debian:debian linux (medium 5.9)
- [CVE-2016-1230](https://insights.sbomify.com/CVE-2016-1230/): Cross-site scripting in ntt:webarena service formmail (medium 6.1)
- [CVE-2016-1229](https://insights.sbomify.com/CVE-2016-1229/): Cross-site scripting in humhub:humhub (medium 5.4)
- [CVE-2016-1228](https://insights.sbomify.com/CVE-2016-1228/): Cross-site request forgery in ntt-east:pr-400mi firmware (high 8.8)
- [CVE-2016-1227](https://insights.sbomify.com/CVE-2016-1227/): Command injection in ntt-east:pr-400mi firmware (high 7.2)
- [CVE-2016-1226](https://insights.sbomify.com/CVE-2016-1226/): Cross-site scripting in trendmicro:internet security (medium 6.1)
- [CVE-2016-1225](https://insights.sbomify.com/CVE-2016-1225/): Information disclosure in trendmicro:internet security (medium 6.5)
- [CVE-2016-1224](https://insights.sbomify.com/CVE-2016-1224/): Cross-site scripting in trendmicro:worry-free business security (medium 6.1)
- [CVE-2016-1223](https://insights.sbomify.com/CVE-2016-1223/): Path traversal in trendmicro:officescan (medium 5.3)
- [CVE-2016-1222](https://insights.sbomify.com/CVE-2016-1222/): Cross-site scripting in kobe-beauty:php-contact-form (medium 6.1)
- [CVE-2016-1221](https://insights.sbomify.com/CVE-2016-1221/): Security feature bypass in jetstar:jetstar (medium 5.9)
- [CVE-2016-1220](https://insights.sbomify.com/CVE-2016-1220/): Missing authorization in cybozu:garoon (medium 4.3)
- [CVE-2016-1219](https://insights.sbomify.com/CVE-2016-1219/): Auth bypass in cybozu:garoon (critical 9.8)
- [CVE-2016-1218](https://insights.sbomify.com/CVE-2016-1218/): SQL injection in cybozu:garoon (high 8.8)
- [CVE-2016-1217](https://insights.sbomify.com/CVE-2016-1217/): Cross-site scripting in cybozu:garoon (medium 6.1)
- [CVE-2016-1216](https://insights.sbomify.com/CVE-2016-1216/): Cross-site scripting in cybozu:garoon (medium 6.1)
- [CVE-2016-1215](https://insights.sbomify.com/CVE-2016-1215/): Cross-site scripting in cybozu:garoon (medium 6.1)
- [CVE-2016-1214](https://insights.sbomify.com/CVE-2016-1214/): Cross-site scripting in cybozu:garoon (medium 6.1)
- [CVE-2016-1213](https://insights.sbomify.com/CVE-2016-1213/): Open redirect in cybozu:garoon (medium 6.1)
- [CVE-2016-1212](https://insights.sbomify.com/CVE-2016-1212/): Path traversal in futomi:mp form mail cgi (low 2.7)
- [CVE-2016-1211](https://insights.sbomify.com/CVE-2016-1211/): Cross-site scripting in epoch:web mailing list (medium 6.1)
- [CVE-2016-1210](https://insights.sbomify.com/CVE-2016-1210/): Security feature bypass in the hyakugo bank:105 bank (medium 5.9)
- [CVE-2016-1209](https://insights.sbomify.com/CVE-2016-1209/): Deserialization in ninjaforms:ninja forms (critical 9.8)
- [CVE-2016-1208](https://insights.sbomify.com/CVE-2016-1208/): Information disclosure in apple:mac os x (high 7.5)
- [CVE-2016-1207](https://insights.sbomify.com/CVE-2016-1207/): Cross-site scripting in iodata:wn-g300r2 firmware (medium 5.4)
- [CVE-2016-1206](https://insights.sbomify.com/CVE-2016-1206/): Auth bypass in iodata:wn-gdn\/r3 firmware (medium 4.3)
- [CVE-2016-1205](https://insights.sbomify.com/CVE-2016-1205/): Cross-site scripting in shiro8:category freearea addition (medium 6.1)
- [CVE-2016-1203](https://insights.sbomify.com/CVE-2016-1203/): Security feature bypass in SaAT Netizen (high 8.1)
- [CVE-2016-1202](https://insights.sbomify.com/CVE-2016-1202/): High severity vulnerability that affects electron (high 7.8)
- [CVE-2016-1201](https://insights.sbomify.com/CVE-2016-1201/): Cross-site request forgery in lockon:ec-cube (high 8.8)
- [CVE-2016-1200](https://insights.sbomify.com/CVE-2016-1200/): Missing authorization in lockon:ec-cube (medium 6.3)
- [CVE-2016-1199](https://insights.sbomify.com/CVE-2016-1199/): Security feature bypass in lockon:ec-cube (medium 5.3)
- [CVE-2016-1198](https://insights.sbomify.com/CVE-2016-1198/): Security feature bypass in ntt:photopt (medium 5.9)
- [CVE-2016-1197](https://insights.sbomify.com/CVE-2016-1197/): Cross-site scripting in cybozu:garoon (medium 6.1)
- [CVE-2016-1196](https://insights.sbomify.com/CVE-2016-1196/): Missing authorization in cybozu:garoon (medium 4.3)
- [CVE-2016-1195](https://insights.sbomify.com/CVE-2016-1195/): Open redirect in cybozu:garoon (high 7.4)
- [CVE-2016-1194](https://insights.sbomify.com/CVE-2016-1194/): Denial of service in cybozu:garoon (medium 6.5)
- [CVE-2016-1193](https://insights.sbomify.com/CVE-2016-1193/): Information disclosure in cybozu:garoon (high 7.5)
- [CVE-2016-1192](https://insights.sbomify.com/CVE-2016-1192/): Path traversal in cybozu:garoon (medium 4.3)
- [CVE-2016-1191](https://insights.sbomify.com/CVE-2016-1191/): Path traversal in cybozu:garoon (medium 5.3)
- [CVE-2016-1190](https://insights.sbomify.com/CVE-2016-1190/): Missing authorization in cybozu:garoon (medium 6.5)
- [CVE-2016-1189](https://insights.sbomify.com/CVE-2016-1189/): Missing authorization in cybozu:garoon (high 8.1)
- [CVE-2016-1188](https://insights.sbomify.com/CVE-2016-1188/): Other in cybozu:garoon (medium 6.5)
- [CVE-2016-1187](https://insights.sbomify.com/CVE-2016-1187/): Weak cryptography in cybozu:kunai (medium 6.8)
- [CVE-2016-1186](https://insights.sbomify.com/CVE-2016-1186/): Security feature bypass in cybozu:kintone (medium 5.9)
- [CVE-2016-1185](https://insights.sbomify.com/CVE-2016-1185/): Information disclosure in cybozu:kintone (low 2.5)
- [CVE-2016-1184](https://insights.sbomify.com/CVE-2016-1184/): Weak cryptography in tokyostarbank:tokyo star bank (medium 5.9)
- [CVE-2016-1183](https://insights.sbomify.com/CVE-2016-1183/): Path traversal in nttdata:terasoluna server framework for java web (low 3.7)
- [CVE-2016-1182](https://insights.sbomify.com/CVE-2016-1182/): Improper Input Validation in Apache Struts (high 8.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/72/