# Vulnerabilities published in 2016 - [CVE-2016-11055](https://insights.sbomify.com/CVE-2016-11055/): Cross-site request forgery in netgear:cm400 firmware (medium 4.3) - [CVE-2016-11054](https://insights.sbomify.com/CVE-2016-11054/): Command injection in netgear:dgn2200 firmware (high 7.2) - [CVE-2016-11053](https://insights.sbomify.com/CVE-2016-11053/): Security feature bypass in google:android (medium 4.6) - [CVE-2016-11052](https://insights.sbomify.com/CVE-2016-11052/): Memory corruption in google:android (high 7.8) - [CVE-2016-11050](https://insights.sbomify.com/CVE-2016-11050/): Security feature bypass in samsung:note2 firmware (medium 4.3) - [CVE-2016-1105](https://insights.sbomify.com/CVE-2016-1105/): Other in adobe:flash player (high 7.5) - [CVE-2016-11049](https://insights.sbomify.com/CVE-2016-11049/): Security feature bypass in google:android (critical 9.1) - [CVE-2016-11048](https://insights.sbomify.com/CVE-2016-11048/): Security feature bypass in google:android (medium 4.6) - [CVE-2016-11047](https://insights.sbomify.com/CVE-2016-11047/): Memory corruption in google:android (high 7.8) - [CVE-2016-11046](https://insights.sbomify.com/CVE-2016-11046/): Security feature bypass in google:android (high 7.5) - [CVE-2016-11045](https://insights.sbomify.com/CVE-2016-11045/): Memory corruption in google:android (high 7.8) - [CVE-2016-11044](https://insights.sbomify.com/CVE-2016-11044/): Security feature bypass in google:android (high 7.8) - [CVE-2016-11043](https://insights.sbomify.com/CVE-2016-11043/): Weak cryptography in google:android (high 7.5) - [CVE-2016-11042](https://insights.sbomify.com/CVE-2016-11042/): Auth bypass in google:android (high 7.5) - [CVE-2016-11041](https://insights.sbomify.com/CVE-2016-11041/): Auth bypass in google:android (medium 4.6) - [CVE-2016-11040](https://insights.sbomify.com/CVE-2016-11040/): Security feature bypass in google:android (medium 4.6) - [CVE-2016-1104](https://insights.sbomify.com/CVE-2016-1104/): Other in adobe:flash player (high 7.5) - [CVE-2016-11039](https://insights.sbomify.com/CVE-2016-11039/): Null dereference in google:android (high 7.5) - [CVE-2016-11038](https://insights.sbomify.com/CVE-2016-11038/): Missing authorization in google:android (critical 9.8) - [CVE-2016-11036](https://insights.sbomify.com/CVE-2016-11036/): Security feature bypass in google:android (critical 9.8) - [CVE-2016-11035](https://insights.sbomify.com/CVE-2016-11035/): Memory corruption in google:android (medium 5.5) - [CVE-2016-11034](https://insights.sbomify.com/CVE-2016-11034/): Denial of service in google:android (medium 6.5) - [CVE-2016-11033](https://insights.sbomify.com/CVE-2016-11033/): Memory corruption in google:android (critical 9.8) - [CVE-2016-11032](https://insights.sbomify.com/CVE-2016-11032/): Missing authorization in google:android (medium 5.3) - [CVE-2016-11031](https://insights.sbomify.com/CVE-2016-11031/): Denial of service in google:android (high 7.5) - [CVE-2016-11030](https://insights.sbomify.com/CVE-2016-11030/): Race condition in google:android (high 8.1) - [CVE-2016-1103](https://insights.sbomify.com/CVE-2016-1103/): Other in adobe:flash player (high 7.5) - [CVE-2016-11029](https://insights.sbomify.com/CVE-2016-11029/): Information disclosure in google:android (high 7.5) - [CVE-2016-11028](https://insights.sbomify.com/CVE-2016-11028/): Memory corruption in google:android (critical 9.8) - [CVE-2016-11027](https://insights.sbomify.com/CVE-2016-11027/): Security feature bypass in google:android (low 2.4) - [CVE-2016-11026](https://insights.sbomify.com/CVE-2016-11026/): Denial of service in google:android (high 7.5) - [CVE-2016-11025](https://insights.sbomify.com/CVE-2016-11025/): Memory corruption in google:android (critical 9.8) - [CVE-2016-11024](https://insights.sbomify.com/CVE-2016-11024/): SQL Injection in odata4j (critical 9.8) - [CVE-2016-11023](https://insights.sbomify.com/CVE-2016-11023/): SQL Injection in odata4j (critical 9.8) - [CVE-2016-11022](https://insights.sbomify.com/CVE-2016-11022/): Command injection in netgear:prosafe wc7520 firmware (high 7.2) - [CVE-2016-11021](https://insights.sbomify.com/CVE-2016-11021/): D-Link DCS-930L Devices OS Command Injection (high 7.2, exploited in the wild) - [CVE-2016-11020](https://insights.sbomify.com/CVE-2016-11020/): File upload in kunena:kunena (critical 9.8) - [CVE-2016-1102](https://insights.sbomify.com/CVE-2016-1102/): Other in adobe:flash player (high 7.5) - [CVE-2016-11018](https://insights.sbomify.com/CVE-2016-11018/): SQL injection in huge-it:image gallery (critical 9.8) - [CVE-2016-11017](https://insights.sbomify.com/CVE-2016-11017/): Command injection in akips:network monitor (critical 9.8) - [CVE-2016-11016](https://insights.sbomify.com/CVE-2016-11016/): Cross-site scripting in netgear:jnr1010 firmware (medium 6.1) - [CVE-2016-11015](https://insights.sbomify.com/CVE-2016-11015/): Cross-site request forgery in netgear:jnr1010 firmware (medium 6.5) - [CVE-2016-11014](https://insights.sbomify.com/CVE-2016-11014/): Auth bypass in netgear:jnr1010 firmware (critical 9.8) - [CVE-2016-11013](https://insights.sbomify.com/CVE-2016-11013/): Cross-site scripting in agentevolution:impress listings (medium 6.1) - [CVE-2016-11012](https://insights.sbomify.com/CVE-2016-11012/): Cross-site scripting in solaplugins:sola support tickets (medium 5.4) - [CVE-2016-11011](https://insights.sbomify.com/CVE-2016-11011/): Privilege escalation in usabilitydynamics:wp-invoice (medium 6.5) - [CVE-2016-11010](https://insights.sbomify.com/CVE-2016-11010/): Missing authorization in usabilitydynamics:wp-invoice (medium 5.3) - [CVE-2016-1101](https://insights.sbomify.com/CVE-2016-1101/): Other in adobe:flash player (high 7.5) - [CVE-2016-11009](https://insights.sbomify.com/CVE-2016-11009/): Missing authorization in usabilitydynamics:wp-invoice (medium 5.3) - [CVE-2016-11008](https://insights.sbomify.com/CVE-2016-11008/): Missing authorization in usabilitydynamics:wp-invoice (medium 5.3) - [CVE-2016-11007](https://insights.sbomify.com/CVE-2016-11007/): Missing authorization in usabilitydynamics:wp-invoice (medium 5.3) - [CVE-2016-11006](https://insights.sbomify.com/CVE-2016-11006/): Missing authorization in usabilitydynamics:wp-invoice (medium 5.3) - [CVE-2016-11005](https://insights.sbomify.com/CVE-2016-11005/): Cross-site scripting in elfsight:instalinker (medium 6.1) - [CVE-2016-11004](https://insights.sbomify.com/CVE-2016-11004/): Privilege escalation in elegantthemes:monarch (high 8.8) - [CVE-2016-11003](https://insights.sbomify.com/CVE-2016-11003/): Privilege escalation in elegantthemes:bloom (high 8.8) - [CVE-2016-11002](https://insights.sbomify.com/CVE-2016-11002/): Privilege escalation in elegantthemes:extra (high 8.8) - [CVE-2016-11001](https://insights.sbomify.com/CVE-2016-11001/): Cross-site scripting in plugin-planet:user submitted posts (medium 6.1) - [CVE-2016-11000](https://insights.sbomify.com/CVE-2016-11000/): SQL injection in smackcoders:ultimate exporter (critical 9.8) - [CVE-2016-1100](https://insights.sbomify.com/CVE-2016-1100/): Other in adobe:flash player (high 7.5) - [CVE-2016-10999](https://insights.sbomify.com/CVE-2016-10999/): Cross-site scripting in momizat:goodnews (medium 6.1) - [CVE-2016-10998](https://insights.sbomify.com/CVE-2016-10998/): Cross-site scripting in ocimscripts:ocim-mp3 (medium 6.1) - [CVE-2016-10997](https://insights.sbomify.com/CVE-2016-10997/): Cross-site request forgery in yourinspirationweb:beauty-premium (medium 6.5) - [CVE-2016-10996](https://insights.sbomify.com/CVE-2016-10996/): Missing authorization in optinmonster:optinmonster (medium 5.3) - [CVE-2016-10995](https://insights.sbomify.com/CVE-2016-10995/): File upload in templatic:telvolution (critical 9.8) - [CVE-2016-10994](https://insights.sbomify.com/CVE-2016-10994/): Cross-site scripting in truemag theme project:truemag theme (medium 6.1) - [CVE-2016-10993](https://insights.sbomify.com/CVE-2016-10993/): Cross-site scripting in scoreme project:scoreme (medium 5.4) - [CVE-2016-10992](https://insights.sbomify.com/CVE-2016-10992/): Cross-site scripting in codepeople:music store (medium 6.1) - [CVE-2016-10991](https://insights.sbomify.com/CVE-2016-10991/): Path traversal in imdb-widget project:imdb-widget (high 7.5) - [CVE-2016-10990](https://insights.sbomify.com/CVE-2016-10990/): Cross-site scripting in wpcerber:cerber security antispam \& malware scan (medium 6.1) - [CVE-2016-1099](https://insights.sbomify.com/CVE-2016-1099/): Other in adobe:flash player (high 7.5) - [CVE-2016-10989](https://insights.sbomify.com/CVE-2016-10989/): Cross-site request forgery in leenk:leenk.me (high 8.8) - [CVE-2016-10988](https://insights.sbomify.com/CVE-2016-10988/): Cross-site scripting in leenk:leenk.me (medium 6.1) - [CVE-2016-10987](https://insights.sbomify.com/CVE-2016-10987/): Cross-site scripting in woocommerce:persian woocommerce sms (medium 6.1) - [CVE-2016-10986](https://insights.sbomify.com/CVE-2016-10986/): Cross-site scripting in nerdcow:tweet wheel (medium 6.1) - [CVE-2016-10985](https://insights.sbomify.com/CVE-2016-10985/): Cross-site scripting in smackcoders:echo sign (medium 6.1) - [CVE-2016-10984](https://insights.sbomify.com/CVE-2016-10984/): Cross-site scripting in smackcoders:echo sign (medium 6.1) - [CVE-2016-10983](https://insights.sbomify.com/CVE-2016-10983/): Missing authorization in ghost:ghost (medium 6.5) - [CVE-2016-10982](https://insights.sbomify.com/CVE-2016-10982/): Cross-site request forgery in kentothemes:kento-post-view-counter (high 8.8) - [CVE-2016-10981](https://insights.sbomify.com/CVE-2016-10981/): Cross-site scripting in kentothemes:kento-post-view-counter (medium 6.1) - [CVE-2016-10980](https://insights.sbomify.com/CVE-2016-10980/): Cross-site scripting in kentothemes:kento-post-view-counter (medium 6.1) - [CVE-2016-1098](https://insights.sbomify.com/CVE-2016-1098/): Other in adobe:flash player (high 7.5) - [CVE-2016-10979](https://insights.sbomify.com/CVE-2016-10979/): Cross-site scripting in fossura:tag miner (medium 6.1) - [CVE-2016-10978](https://insights.sbomify.com/CVE-2016-10978/): Cross-site request forgery in fossura:tag miner (high 8.8) - [CVE-2016-10977](https://insights.sbomify.com/CVE-2016-10977/): Path traversal in neliosoftware:nelio ab testing (medium 6.5) - [CVE-2016-10976](https://insights.sbomify.com/CVE-2016-10976/): Cross-site scripting in kodebyraaet:safe editor (medium 6.1) - [CVE-2016-10975](https://insights.sbomify.com/CVE-2016-10975/): Cross-site scripting in tonjoostudio:fluid-responsive-slideshow (medium 6.1) - [CVE-2016-10974](https://insights.sbomify.com/CVE-2016-10974/): Cross-site request forgery in tonjoostudio:fluid-responsive-slideshow (high 8.8) - [CVE-2016-10973](https://insights.sbomify.com/CVE-2016-10973/): Cross-site scripting in brafton:brafton (medium 6.1) - [CVE-2016-10972](https://insights.sbomify.com/CVE-2016-10972/): Missing authorization in tagdiv:newspaper (critical 9.8) - [CVE-2016-10971](https://insights.sbomify.com/CVE-2016-10971/): Auth bypass in membersonic:membersonic (critical 9.8) - [CVE-2016-10970](https://insights.sbomify.com/CVE-2016-10970/): Cross-site scripting in supportflow project:supportflow (medium 6.1) - [CVE-2016-1097](https://insights.sbomify.com/CVE-2016-1097/): Other in adobe:flash player (high 7.5) - [CVE-2016-10969](https://insights.sbomify.com/CVE-2016-10969/): Cross-site scripting in supportflow project:supportflow (medium 6.1) - [CVE-2016-10968](https://insights.sbomify.com/CVE-2016-10968/): Privilege escalation in peepso:peepso (high 8.8) - [CVE-2016-10967](https://insights.sbomify.com/CVE-2016-10967/): Cross-site scripting in creativeinteractivemedia:real3d flipbook (medium 6.1) - [CVE-2016-10966](https://insights.sbomify.com/CVE-2016-10966/): Path traversal in creativeinteractivemedia:real3d flipbook (high 7.5) - [CVE-2016-10965](https://insights.sbomify.com/CVE-2016-10965/): Path traversal in creativeinteractivemedia:real3d flipbook (high 7.5) - [CVE-2016-10964](https://insights.sbomify.com/CVE-2016-10964/): Cross-site scripting in findshorty:dwnldr (medium 6.1) - [CVE-2016-10963](https://insights.sbomify.com/CVE-2016-10963/): Cross-site scripting in icegram:icegram engage (medium 6.1) - [CVE-2016-10962](https://insights.sbomify.com/CVE-2016-10962/): Cross-site request forgery in icegram:icegram engage (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2016/page/74/