# Vulnerabilities published in 2016


- [CVE-2016-1078](https://insights.sbomify.com/CVE-2016-1078/): Memory corruption in adobe:acrobat (critical 9.8)
- [CVE-2016-10779](https://insights.sbomify.com/CVE-2016-10779/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2016-10778](https://insights.sbomify.com/CVE-2016-10778/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2016-10777](https://insights.sbomify.com/CVE-2016-10777/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2016-10776](https://insights.sbomify.com/CVE-2016-10776/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2016-10775](https://insights.sbomify.com/CVE-2016-10775/): Other in cpanel:cpanel (medium 6.5)
- [CVE-2016-10774](https://insights.sbomify.com/CVE-2016-10774/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2016-10773](https://insights.sbomify.com/CVE-2016-10773/): Memory corruption in cpanel:cpanel (high 8.8)
- [CVE-2016-10772](https://insights.sbomify.com/CVE-2016-10772/): Security feature bypass in cpanel:cpanel (low 3.3)
- [CVE-2016-10771](https://insights.sbomify.com/CVE-2016-10771/): Other in cpanel:cpanel (high 8.1)
- [CVE-2016-10770](https://insights.sbomify.com/CVE-2016-10770/): Other in cpanel:cpanel (medium 6.5)
- [CVE-2016-1077](https://insights.sbomify.com/CVE-2016-1077/): Memory corruption in adobe:acrobat (critical 9.8)
- [CVE-2016-10769](https://insights.sbomify.com/CVE-2016-10769/): Open redirect in cpanel:cpanel (medium 6.1)
- [CVE-2016-10768](https://insights.sbomify.com/CVE-2016-10768/): Other in cpanel:cpanel (medium 6.5)
- [CVE-2016-10767](https://insights.sbomify.com/CVE-2016-10767/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2016-10766](https://insights.sbomify.com/CVE-2016-10766/): Cross-site request forgery in edx:edx-platform (high 8.8)
- [CVE-2016-10765](https://insights.sbomify.com/CVE-2016-10765/): Business logic in edx:edx-platform (medium 5.3)
- [CVE-2016-10764](https://insights.sbomify.com/CVE-2016-10764/): Memory corruption in linux:linux kernel (critical 9.8)
- [CVE-2016-10763](https://insights.sbomify.com/CVE-2016-10763/): Cross-site scripting in automattic:camptix event ticketing (medium 4.8)
- [CVE-2016-10762](https://insights.sbomify.com/CVE-2016-10762/): Code injection in automattic:camptix event ticketing (high 7.5)
- [CVE-2016-10761](https://insights.sbomify.com/CVE-2016-10761/): Security feature bypass in logitech:k360 firmware (medium 6.5)
- [CVE-2016-10760](https://insights.sbomify.com/CVE-2016-10760/): Command injection in seowonintech:swr-300a firmware (critical 9.8)
- [CVE-2016-1076](https://insights.sbomify.com/CVE-2016-1076/): Memory corruption in adobe:acrobat (critical 9.8)
- [CVE-2016-10759](https://insights.sbomify.com/CVE-2016-10759/): Path traversal in precurio:precurio (critical 9.8)
- [CVE-2016-10758](https://insights.sbomify.com/CVE-2016-10758/): File upload in phpkit:phpkit (high 8.8)
- [CVE-2016-10757](https://insights.sbomify.com/CVE-2016-10757/): Cross-site request forgery in readaxo:readaxo (high 8.8)
- [CVE-2016-10756](https://insights.sbomify.com/CVE-2016-10756/): Cross-site request forgery in kliqqi:kliqqi cms (high 8.8)
- [CVE-2016-10755](https://insights.sbomify.com/CVE-2016-10755/): SQL injection in abantecart:abantecart (high 8.8)
- [CVE-2016-10754](https://insights.sbomify.com/CVE-2016-10754/): SQL injection in vtiger:vtiger crm (high 8.8)
- [CVE-2016-10753](https://insights.sbomify.com/CVE-2016-10753/): Deserialization in e107:e107 (high 8.8)
- [CVE-2016-10752](https://insights.sbomify.com/CVE-2016-10752/): File upload in s9y:serendipity (critical 9.8)
- [CVE-2016-10751](https://insights.sbomify.com/CVE-2016-10751/): File upload in osclass:osclass (high 7.2)
- [CVE-2016-10750](https://insights.sbomify.com/CVE-2016-10750/): Deserialization of Untrusted Data in Hazelcast (high 8.1)
- [CVE-2016-1075](https://insights.sbomify.com/CVE-2016-1075/): Use after free in adobe:acrobat dc (critical 9.8)
- [CVE-2016-10749](https://insights.sbomify.com/CVE-2016-10749/): Memory corruption in davegamble:cjson (critical 9.8)
- [CVE-2016-10746](https://insights.sbomify.com/CVE-2016-10746/): Missing authorization in debian:debian linux (high 7.5)
- [CVE-2016-10745](https://insights.sbomify.com/CVE-2016-10745/): Jinja2 sandbox escape vulnerability (high 8.6)
- [CVE-2016-10744](https://insights.sbomify.com/CVE-2016-10744/): Improper Neutralization of Input During Web Page Generation in Select2 (medium 6.1)
- [CVE-2016-10743](https://insights.sbomify.com/CVE-2016-10743/): Weak cryptography in w1.fi:hostapd (high 7.5)
- [CVE-2016-10742](https://insights.sbomify.com/CVE-2016-10742/): Open redirect in debian:debian linux (medium 6.1)
- [CVE-2016-10741](https://insights.sbomify.com/CVE-2016-10741/): Race condition in debian:debian linux (medium 4.7)
- [CVE-2016-10740](https://insights.sbomify.com/CVE-2016-10740/): Information disclosure in atlassian:crowd (medium 4.9)
- [CVE-2016-1074](https://insights.sbomify.com/CVE-2016-1074/): Memory corruption in adobe:acrobat (critical 9.8)
- [CVE-2016-10739](https://insights.sbomify.com/CVE-2016-10739/): Other in gnu:glibc (medium 5.3)
- [CVE-2016-10738](https://insights.sbomify.com/CVE-2016-10738/): Cross-site request forgery in castlamp:zenbership (high 8.8)
- [CVE-2016-10737](https://insights.sbomify.com/CVE-2016-10737/): Cross-site scripting in s9y:serendipity (medium 5.4)
- [CVE-2016-10736](https://insights.sbomify.com/CVE-2016-10736/): Cross-site scripting in devpups:social pug (medium 6.1)
- [CVE-2016-10735](https://insights.sbomify.com/CVE-2016-10735/): Bootstrap Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2016-10734](https://insights.sbomify.com/CVE-2016-10734/): Missing authorization in projectsend:projectsend (critical 9.8)
- [CVE-2016-10733](https://insights.sbomify.com/CVE-2016-10733/): Path traversal in projectsend:projectsend (critical 9.8)
- [CVE-2016-10732](https://insights.sbomify.com/CVE-2016-10732/): Auth bypass in projectsend:projectsend (critical 9.8)
- [CVE-2016-10731](https://insights.sbomify.com/CVE-2016-10731/): SQL injection in projectsend:projectsend (critical 9.8)
- [CVE-2016-10730](https://insights.sbomify.com/CVE-2016-10730/): Privilege escalation in redhat:enterprise linux (high 7.8)
- [CVE-2016-1073](https://insights.sbomify.com/CVE-2016-1073/): Memory corruption in adobe:acrobat (critical 9.8)
- [CVE-2016-10729](https://insights.sbomify.com/CVE-2016-10729/): Command injection in debian:debian linux (high 7.8)
- [CVE-2016-10728](https://insights.sbomify.com/CVE-2016-10728/): Security feature bypass in suricata-ids:suricata (medium 5.3)
- [CVE-2016-10727](https://insights.sbomify.com/CVE-2016-10727/): Information disclosure in canonical:ubuntu linux (critical 9.8)
- [CVE-2016-10726](https://insights.sbomify.com/CVE-2016-10726/): High severity vulnerability that affects org.dspace:dspace-xmlui (high 7.5)
- [CVE-2016-10725](https://insights.sbomify.com/CVE-2016-10725/): Business logic in bitcoin:bitcoin-qt (high 7.5)
- [CVE-2016-10724](https://insights.sbomify.com/CVE-2016-10724/): Denial of service in bitcoin:bitcoin-qt (high 7.5)
- [CVE-2016-10723](https://insights.sbomify.com/CVE-2016-10723/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2016-10722](https://insights.sbomify.com/CVE-2016-10722/): Memory corruption in partclone project:partclone (critical 9.8)
- [CVE-2016-10721](https://insights.sbomify.com/CVE-2016-10721/): Memory corruption in partclone:partclone (critical 9.8)
- [CVE-2016-1072](https://insights.sbomify.com/CVE-2016-1072/): Memory corruption in adobe:acrobat (critical 9.8)
- [CVE-2016-10719](https://insights.sbomify.com/CVE-2016-10719/): Cross-site scripting in tp-link:archer cr700 firmware (medium 6.1)
- [CVE-2016-10718](https://insights.sbomify.com/CVE-2016-10718/): Denial of service in brave:brave browser (high 7.5)
- [CVE-2016-10717](https://insights.sbomify.com/CVE-2016-10717/): Security feature bypass in malwarebytes:malwarebytes anti-malware (high 7.8)
- [CVE-2016-10716](https://insights.sbomify.com/CVE-2016-10716/): Cross-site scripting in mail.ru:calendar (medium 5.4)
- [CVE-2016-10715](https://insights.sbomify.com/CVE-2016-10715/): Cross-site scripting in artezio:kanban board (medium 5.4)
- [CVE-2016-10714](https://insights.sbomify.com/CVE-2016-10714/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2016-10713](https://insights.sbomify.com/CVE-2016-10713/): Memory corruption in gnu:patch (medium 5.5)
- [CVE-2016-10712](https://insights.sbomify.com/CVE-2016-10712/): Other in canonical:ubuntu linux (high 7.5)
- [CVE-2016-10711](https://insights.sbomify.com/CVE-2016-10711/): Other in apsis:pound (critical 9.8)
- [CVE-2016-10710](https://insights.sbomify.com/CVE-2016-10710/): Missing authorization in biscom:secure file transfer (high 8.1)
- [CVE-2016-1071](https://insights.sbomify.com/CVE-2016-1071/): Memory corruption in adobe:acrobat (critical 9.8)
- [CVE-2016-10709](https://insights.sbomify.com/CVE-2016-10709/): Command injection in pfsense:pfsense (high 8.8)
- [CVE-2016-10708](https://insights.sbomify.com/CVE-2016-10708/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2016-10707](https://insights.sbomify.com/CVE-2016-10707/): Denial of Service in jquery (high 7.5)
- [CVE-2016-10706](https://insights.sbomify.com/CVE-2016-10706/): Cross-site scripting in automattic:jetpack (medium 6.1)
- [CVE-2016-10705](https://insights.sbomify.com/CVE-2016-10705/): Cross-site scripting in automattic:jetpack (medium 6.1)
- [CVE-2016-10704](https://insights.sbomify.com/CVE-2016-10704/): Cross-site scripting in magento:magento (medium 6.1)
- [CVE-2016-10703](https://insights.sbomify.com/CVE-2016-10703/): Denial of Service in ecstatic (high 7.5)
- [CVE-2016-10702](https://insights.sbomify.com/CVE-2016-10702/): Information disclosure in pebble:pebble firmware (medium 6.1)
- [CVE-2016-10701](https://insights.sbomify.com/CVE-2016-10701/): Cross-site request forgery in hitachivantara:pentaho business analytics (high 8.8)
- [CVE-2016-10700](https://insights.sbomify.com/CVE-2016-10700/): Auth bypass in cacti:cacti (high 8.8)
- [CVE-2016-1070](https://insights.sbomify.com/CVE-2016-1070/): Use after free in adobe:acrobat (critical 9.8)
- [CVE-2016-10699](https://insights.sbomify.com/CVE-2016-10699/): Cross-site scripting in dlink:dsl-2740e firmware (medium 6.1)
- [CVE-2016-10698](https://insights.sbomify.com/CVE-2016-10698/): Downloads Resources over HTTP in mystem-fix (high 8.1)
- [CVE-2016-10697](https://insights.sbomify.com/CVE-2016-10697/): Downloads Resources over HTTP in react-native-baidu-voice-synthesizer (high 8.1)
- [CVE-2016-10696](https://insights.sbomify.com/CVE-2016-10696/): Downloads Resources over HTTP in windows-latestchromedriver (high 8.1)
- [CVE-2016-10695](https://insights.sbomify.com/CVE-2016-10695/): Downloads Resources over HTTP in npm-test-sqlite3-trunk (high 8.1)
- [CVE-2016-10694](https://insights.sbomify.com/CVE-2016-10694/): Downloads Resources over HTTP in alto-saxophone (high 8.1)
- [CVE-2016-10693](https://insights.sbomify.com/CVE-2016-10693/): Downloads Resources over HTTP in pm2-kafka (high 8.1)
- [CVE-2016-10692](https://insights.sbomify.com/CVE-2016-10692/): Downloads Resources over HTTP in haxeshim (high 8.1)
- [CVE-2016-10691](https://insights.sbomify.com/CVE-2016-10691/): windows-seleniumjar downloads Resources over HTTP (high 8.1)
- [CVE-2016-10690](https://insights.sbomify.com/CVE-2016-10690/): openframe-ascii-image downloads Resources over HTTP (high 8.1)
- [CVE-2016-1069](https://insights.sbomify.com/CVE-2016-1069/): Use after free in adobe:acrobat (critical 9.8)
- [CVE-2016-10689](https://insights.sbomify.com/CVE-2016-10689/): Downloads Resources over HTTP in windows-iedriver (high 8.1)
- [CVE-2016-10688](https://insights.sbomify.com/CVE-2016-10688/): Downloads Resources over HTTP in haxe3 (high 8.1)
- [CVE-2016-10687](https://insights.sbomify.com/CVE-2016-10687/): windows-selenium-chromedriver downloads Resources over HTTP (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/77/