Vulnerabilities published in 2016
9,398 vulnerabilities were published in 2016: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 73 of 94.
- CVE-2016-1181 Improper Input Validation in Apache Struts
- CVE-2016-1180 Cross-site scripting in cyber-will:social-button premium
- CVE-2016-1179 Cross-site scripting in appleple:a-blog cms
- CVE-2016-1178 Auth bypass in appleple:a-blog cms
- CVE-2016-1177 Other in falconsc:wisepoint
- CVE-2016-1176 Memory corruption in sharp:eva animator
- CVE-2016-1175 Cross-site request forgery in sharp:aquos hn-pp150 firmware
- CVE-2016-1174 Cross-site request forgery in hiniarata:casebook plugin
- CVE-2016-1173 Cross-site scripting in hiniarata:casebook plugin
- CVE-2016-1172 Cross-site request forgery in hiniarata:casebook plugin
- CVE-2016-1171 Cross-site scripting in hiniarata:casebook plugin
- CVE-2016-1170 Cross-site request forgery in hiniarata:casebook plugin
- CVE-2016-1169 Cross-site scripting in hiniarata:casebook plugin
- CVE-2016-1168 Cross-site request forgery in aterm:wf800hp firmware
- CVE-2016-1167 Cross-site request forgery in aterm:wg300hp firmware
- CVE-2016-1161 Cross-site request forgery in zohocorp:password manager pro
- CVE-2016-1160 Cross-site scripting in wp favorite posts project:wp favorite posts
- CVE-2016-1159 Information disclosure in Password Manager Pro (PMP)
- CVE-2016-1158 Cross-site request forgery in corega:cg-wlbargmh firmware
- CVE-2016-1157 Cross-site scripting in log-chat project:log-chat
- CVE-2016-1156 Denial of service in linecorp:line
- CVE-2016-1155 Code injection in google:android
- CVE-2016-1154 SQL injection in cuore:ec-cube help plugin
- CVE-2016-1153 Denial of service in cybozu:office
- CVE-2016-1152 Missing authorization in cybozu:office
- CVE-2016-1151 Cross-site request forgery in cybozu:office
- CVE-2016-1150 Cross-site scripting in cybozu:office
- CVE-2016-1149 Cross-site scripting in cybozu:office
- CVE-2016-1148 Weak cryptography in photosynth:akerun
- CVE-2016-1145 Path traversal in nec:expresscluster x
- CVE-2016-1144 Cross-site scripting in websquare:job-cube
- CVE-2016-1143 Cross-site scripting in vine mv project:vine mv
- CVE-2016-1142 Command injection in seeds:acmailer
- CVE-2016-1141 Command injection in kddi:home spot cube firmware
- CVE-2016-1140 Other in kddi:home spot cube firmware
- CVE-2016-1139 Cross-site request forgery in kddi:home spot cube firmware
- CVE-2016-1138 Other in kddi:home spot cube firmware
- CVE-2016-1137 Open redirect in kddi:home spot cube firmware
- CVE-2016-1136 Cross-site scripting in kddi:home spot cube firmware
- CVE-2016-1135 Cross-site scripting in buffalotech:bhr-4grv2 firmware
- CVE-2016-1134 Cross-site request forgery in buffalotech:bhr-4grv2 firmware
- CVE-2016-1133 Other in dena:h2o
- CVE-2016-1132 Security feature bypass in docomo:shoplat
- CVE-2016-1131 Memory corruption in dx library project:dx library
- CVE-2016-1130 Memory corruption in adobe:acrobat
- CVE-2016-1129 Memory corruption in adobe:acrobat
- CVE-2016-1128 Memory corruption in adobe:acrobat
- CVE-2016-1127 Memory corruption in adobe:acrobat
- CVE-2016-1126 Memory corruption in adobe:acrobat
- CVE-2016-1125 Memory corruption in adobe:acrobat
- CVE-2016-1124 Memory corruption in adobe:acrobat
- CVE-2016-1123 Memory corruption in adobe:acrobat
- CVE-2016-1122 Use after free in adobe:acrobat
- CVE-2016-1121 Use after free in adobe:acrobat dc
- CVE-2016-1120 Memory corruption in adobe:acrobat
- CVE-2016-1119 Memory corruption in adobe:acrobat
- CVE-2016-1118 Memory corruption in adobe:acrobat
- CVE-2016-1117 Security feature bypass in adobe:acrobat
- CVE-2016-1116 Memory corruption in adobe:acrobat
- CVE-2016-1115 Security feature bypass in adobe:coldfusion
- CVE-2016-1114 Deserialization in adobe:coldfusion
- CVE-2016-1113 Cross-site scripting in adobe:coldfusion
- CVE-2016-1112 Information disclosure in adobe:acrobat
- CVE-2016-1111 Memory corruption in adobe:acrobat
- CVE-2016-1110 Other in adobe:flash player
- CVE-2016-1109 Other in adobe:flash player
- CVE-2016-11086 Improper Certificate Validation in oauth ruby gem
- CVE-2016-11085 Cross-site request forgery in expresstech:quiz and survey master
- CVE-2016-11084 Mattermost Server allows XSS via CSRF
- CVE-2016-11083 Mattermost Server: Files may be rendered inline instead of downloaded, allowing script execution
- CVE-2016-11082 Mattermost Server is vulnerable to XSS through crafted links
- CVE-2016-11081 Mattermost Server exposes information stored by a web browser
- CVE-2016-11080 Mattermost Server exposes account details to any Team Administrator
- CVE-2016-1108 Other in adobe:flash player
- CVE-2016-11079 Mattermost Server allows XSS via redirect URL
- CVE-2016-11078 Mattermost Server exposes sensitive information via its System Console UI
- CVE-2016-11077 Mattermost Server allows System Admin to modify LDAP account names and email addresses
- CVE-2016-11076 Mattermost Server does not check if cookies are used over SSL
- CVE-2016-11075 Mattermost Server exposes sensitive information about team URLs via an API
- CVE-2016-11074 Mattermost Server: Insufficient Password-Reset Link Invalidation
- CVE-2016-11073 Mattermost Server is vulnerable to XSS via a Legal or Support setting
- CVE-2016-11072 Mattermost Server's Session ID and Session Token are potentially compromised
- CVE-2016-11071 Mattermost Server is vulnerable to XSS through lack of link relationship attributes `noreferrer` and `noopener`
- CVE-2016-11070 Mattermost Server is vulnerable to XSS through customizable theme color-code values
- CVE-2016-1107 Other in adobe:flash player
- CVE-2016-11069 Mattermost Server does not enforce rate limits on password change attempts
- CVE-2016-11068 Mattermost Server is vulnerable to Code Injection through its LDAP fields
- CVE-2016-11067 Mattermost Server is vulnerable to Uncontrolled Resource Consumption
- CVE-2016-11066 Mattermost Server: initial_load API exposes unnecessary information
- CVE-2016-11065 Missing authorization in mattermost:mattermost server
- CVE-2016-11064 Code injection in mattermost:mattermost desktop
- CVE-2016-11063 Mattermost Server vulnerable to Cross-site Scripting through file preview feature
- CVE-2016-11062 Security feature bypass in mattermost:mattermost server
- CVE-2016-11061 Command injection in xerox:workcentre 3655 firmware
- CVE-2016-11060 Weak cryptography in netgear:fvs318g firmware
- CVE-2016-1106 Other in adobe:flash player
- CVE-2016-11059 Information disclosure in netgear:ac1450 firmware
- CVE-2016-11058 Hardcoded credentials in netgear:genie
- CVE-2016-11057 Auth bypass in netgear:jnr1010 firmware
- CVE-2016-11056 Auth bypass in netgear:readynas surveillance