# Vulnerabilities published in 2016


- [CVE-2016-9066](https://insights.sbomify.com/CVE-2016-9066/): Memory corruption in Firefox (high 7.5)
- [CVE-2016-9065](https://insights.sbomify.com/CVE-2016-9065/): Security feature bypass in Firefox (high 7.5)
- [CVE-2016-9064](https://insights.sbomify.com/CVE-2016-9064/): Security feature bypass in Firefox (medium 5.9)
- [CVE-2016-9063](https://insights.sbomify.com/CVE-2016-9063/): Integer overflow in Firefox (critical 9.8)
- [CVE-2016-9062](https://insights.sbomify.com/CVE-2016-9062/): Information disclosure in Firefox (low 3.3)
- [CVE-2016-9061](https://insights.sbomify.com/CVE-2016-9061/): Information disclosure in Firefox (high 7.5)
- [CVE-2016-9054](https://insights.sbomify.com/CVE-2016-9054/): Memory corruption in Database Server (critical 9.8)
- [CVE-2016-9053](https://insights.sbomify.com/CVE-2016-9053/): Memory corruption in Database Server (critical 9.8)
- [CVE-2016-9052](https://insights.sbomify.com/CVE-2016-9052/): Memory corruption in Aerospike version Aerospike Database Server 3.10.0.3 (critical 9.8)
- [CVE-2016-9051](https://insights.sbomify.com/CVE-2016-9051/): Memory corruption in Database Server (critical 9.8)
- [CVE-2016-9050](https://insights.sbomify.com/CVE-2016-9050/): Information disclosure in Database Server (high 8.2)
- [CVE-2016-9049](https://insights.sbomify.com/CVE-2016-9049/): Null dereference in Database Server (high 7.5)
- [CVE-2016-9048](https://insights.sbomify.com/CVE-2016-9048/): SQL injection in ProcessMaker Enterprise (high 7.4)
- [CVE-2016-9045](https://insights.sbomify.com/CVE-2016-9045/): Deserialization in ProcessMaker Enterprise (high 8.8)
- [CVE-2016-9044](https://insights.sbomify.com/CVE-2016-9044/): Command injection in WebFOCUS (high 8.8)
- [CVE-2016-9043](https://insights.sbomify.com/CVE-2016-9043/): Memory corruption in CorelDRAW (high 8.8)
- [CVE-2016-9042](https://insights.sbomify.com/CVE-2016-9042/): Denial of service in Network Time Protocol (low 3.7)
- [CVE-2016-9040](https://insights.sbomify.com/CVE-2016-9040/): Denial of service in SmartOS (medium 6.2)
- [CVE-2016-9039](https://insights.sbomify.com/CVE-2016-9039/): Denial of service in SmartOS (medium 6.2)
- [CVE-2016-9038](https://insights.sbomify.com/CVE-2016-9038/): Race condition in X (high 7.8)
- [CVE-2016-9037](https://insights.sbomify.com/CVE-2016-9037/): Memory corruption in Tarantool (high 7.5)
- [CVE-2016-9036](https://insights.sbomify.com/CVE-2016-9036/): Denial of service in Msgpuck library (high 7.5)
- [CVE-2016-9035](https://insights.sbomify.com/CVE-2016-9035/): Memory corruption in SmartOS (high 7.0)
- [CVE-2016-9034](https://insights.sbomify.com/CVE-2016-9034/): Memory corruption in SmartOS (high 7.0)
- [CVE-2016-9033](https://insights.sbomify.com/CVE-2016-9033/): Memory corruption in SmartOS (high 7.0)
- [CVE-2016-9032](https://insights.sbomify.com/CVE-2016-9032/): Memory corruption in SmartOS (high 7.0)
- [CVE-2016-9031](https://insights.sbomify.com/CVE-2016-9031/): Integer overflow in SmartOS (high 7.8)
- [CVE-2016-9028](https://insights.sbomify.com/CVE-2016-9028/): Open redirect in n/a (high 8.8)
- [CVE-2016-9026](https://insights.sbomify.com/CVE-2016-9026/): File upload in n/a (critical 9.8)
- [CVE-2016-9025](https://insights.sbomify.com/CVE-2016-9025/): Other in n/a (critical 9.8)
- [CVE-2016-9023](https://insights.sbomify.com/CVE-2016-9023/): Other in n/a (critical 9.8)
- [CVE-2016-9022](https://insights.sbomify.com/CVE-2016-9022/): Other in n/a (critical 9.8)
- [CVE-2016-9021](https://insights.sbomify.com/CVE-2016-9021/): Exponent CMS before 2.6.0 has improper input validation in storeController.php. (critical 9.8)
- [CVE-2016-9020](https://insights.sbomify.com/CVE-2016-9020/): SQL injection in n/a (critical 9.8)
- [CVE-2016-9019](https://insights.sbomify.com/CVE-2016-9019/): SQL injection in n/a (critical 9.8)
- [CVE-2016-9018](https://insights.sbomify.com/CVE-2016-9018/): Null dereference in n/a (medium 5.5)
- [CVE-2016-9017](https://insights.sbomify.com/CVE-2016-9017/): Information disclosure in n/a (high 7.5)
- [CVE-2016-9016](https://insights.sbomify.com/CVE-2016-9016/): Security feature bypass in n/a (high 8.8)
- [CVE-2016-9015](https://insights.sbomify.com/CVE-2016-9015/): Urllib3 Incorrect Certificate Validation (low 3.7)
- [CVE-2016-9014](https://insights.sbomify.com/CVE-2016-9014/): Django DNS Rebinding Vulnerability (high 8.1)
- [CVE-2016-9013](https://insights.sbomify.com/CVE-2016-9013/): Django user with hardcoded password created when running tests on Oracle (critical 9.8)
- [CVE-2016-9012](https://insights.sbomify.com/CVE-2016-9012/): Missing authorization in n/a (high 8.8)
- [CVE-2016-9011](https://insights.sbomify.com/CVE-2016-9011/): Denial of service in n/a (medium 5.5)
- [CVE-2016-9010](https://insights.sbomify.com/CVE-2016-9010/): Cross-site scripting in Integration Bus (medium 6.1)
- [CVE-2016-9009](https://insights.sbomify.com/CVE-2016-9009/): Denial of service in WebSphere MQ (low 3.1)
- [CVE-2016-9008](https://insights.sbomify.com/CVE-2016-9008/): Missing authorization in UrbanCode Deploy (high 7.5)
- [CVE-2016-9006](https://insights.sbomify.com/CVE-2016-9006/): Cross-site scripting in UrbanCode Deploy (medium 5.4)
- [CVE-2016-9005](https://insights.sbomify.com/CVE-2016-9005/): Auth bypass in System Storage (critical 9.8)
- [CVE-2016-9000](https://insights.sbomify.com/CVE-2016-9000/): Cross-site scripting in InfoSphere Information Server (medium 6.1)
- [CVE-2016-8999](https://insights.sbomify.com/CVE-2016-8999/): Cross-site scripting in InfoSphere Information Server (medium 5.4)
- [CVE-2016-8998](https://insights.sbomify.com/CVE-2016-8998/): Memory corruption in Tivoli Storage Manager (high 7.2)
- [CVE-2016-8987](https://insights.sbomify.com/CVE-2016-8987/): Information disclosure in Maximo Asset Management (medium 4.3)
- [CVE-2016-8986](https://insights.sbomify.com/CVE-2016-8986/): Denial of service in WebSphere MQ (medium 6.5)
- [CVE-2016-8982](https://insights.sbomify.com/CVE-2016-8982/): Information disclosure in InfoSphere DataStage (medium 5.3)
- [CVE-2016-8981](https://insights.sbomify.com/CVE-2016-8981/): Information disclosure in BigFix Inventory (medium 5.5)
- [CVE-2016-8980](https://insights.sbomify.com/CVE-2016-8980/): XML external entity in BigFix Inventory (high 8.1)
- [CVE-2016-8977](https://insights.sbomify.com/CVE-2016-8977/): Information disclosure in BigFix Inventory (medium 5.3)
- [CVE-2016-8975](https://insights.sbomify.com/CVE-2016-8975/): Cross-site scripting in Rational Rhapsody Design Manager (medium 5.4)
- [CVE-2016-8974](https://insights.sbomify.com/CVE-2016-8974/): XML external entity in Rational Rhapsody Design Manager (high 8.1)
- [CVE-2016-8973](https://insights.sbomify.com/CVE-2016-8973/): File upload in Rational Rhapsody Design Manager (medium 4.3)
- [CVE-2016-8972](https://insights.sbomify.com/CVE-2016-8972/): Privilege escalation in AIX (high 7.8)
- [CVE-2016-8971](https://insights.sbomify.com/CVE-2016-8971/): Denial of service in WebSphere MQ (medium 6.5)
- [CVE-2016-8968](https://insights.sbomify.com/CVE-2016-8968/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2016-8967](https://insights.sbomify.com/CVE-2016-8967/): Hardcoded credentials in BigFix Inventory (medium 5.5)
- [CVE-2016-8966](https://insights.sbomify.com/CVE-2016-8966/): Information disclosure in BigFix Inventory (medium 5.9)
- [CVE-2016-8964](https://insights.sbomify.com/CVE-2016-8964/): Security feature bypass in BigFix Inventory (critical 9.8)
- [CVE-2016-8963](https://insights.sbomify.com/CVE-2016-8963/): Information disclosure in BigFix Inventory (medium 5.5)
- [CVE-2016-8962](https://insights.sbomify.com/CVE-2016-8962/): Weak cryptography in BigFix Inventory (medium 5.9)
- [CVE-2016-8961](https://insights.sbomify.com/CVE-2016-8961/): Open redirect in BigFix Inventory (medium 6.1)
- [CVE-2016-8960](https://insights.sbomify.com/CVE-2016-8960/): Privilege escalation in Cognos Business Intelligence (high 8.8)
- [CVE-2016-8954](https://insights.sbomify.com/CVE-2016-8954/): Hardcoded credentials in DashDB Local (critical 9.8)
- [CVE-2016-8953](https://insights.sbomify.com/CVE-2016-8953/): Open redirect in Emptoris Sourcing (medium 5.4)
- [CVE-2016-8952](https://insights.sbomify.com/CVE-2016-8952/): Cross-site scripting in Emptoris Strategic Supply Management (medium 5.4)
- [CVE-2016-8951](https://insights.sbomify.com/CVE-2016-8951/): Denial of service in Emptoris Strategic Supply Management (high 7.5)
- [CVE-2016-8950](https://insights.sbomify.com/CVE-2016-8950/): Cross-site scripting in Emptoris Sourcing (medium 5.4)
- [CVE-2016-8949](https://insights.sbomify.com/CVE-2016-8949/): Open redirect in Emptoris Supplier Lifecycle Management (medium 5.4)
- [CVE-2016-8948](https://insights.sbomify.com/CVE-2016-8948/): Cross-site scripting in Emptoris Sourcing (medium 5.4)
- [CVE-2016-8947](https://insights.sbomify.com/CVE-2016-8947/): Open redirect in Emptoris Sourcing (medium 6.1)
- [CVE-2016-8946](https://insights.sbomify.com/CVE-2016-8946/): Cross-site scripting in Emptoris Sourcing (medium 5.4)
- [CVE-2016-8944](https://insights.sbomify.com/CVE-2016-8944/): Denial of service in AIX (medium 5.5)
- [CVE-2016-8943](https://insights.sbomify.com/CVE-2016-8943/): Cross-site scripting in Spectrum Control Standard Select Edition (medium 5.4)
- [CVE-2016-8942](https://insights.sbomify.com/CVE-2016-8942/): Missing authorization in Spectrum Control Standard Select Edition (low 3.1)
- [CVE-2016-8941](https://insights.sbomify.com/CVE-2016-8941/): Cross-site request forgery in Spectrum Control Standard Select Edition (high 8.8)
- [CVE-2016-8940](https://insights.sbomify.com/CVE-2016-8940/): Missing authorization in Tivoli Storage Manager (high 8.8)
- [CVE-2016-8939](https://insights.sbomify.com/CVE-2016-8939/): Information disclosure in Spectrum Protect (medium 5.5)
- [CVE-2016-8938](https://insights.sbomify.com/CVE-2016-8938/): File upload in UrbanCode Deploy (critical 10.0)
- [CVE-2016-8937](https://insights.sbomify.com/CVE-2016-8937/): Information disclosure in Spectrum Protect (critical 9.8)
- [CVE-2016-8936](https://insights.sbomify.com/CVE-2016-8936/): Cross-site scripting in WebSphere Portal (medium 6.1)
- [CVE-2016-8935](https://insights.sbomify.com/CVE-2016-8935/): Cross-site scripting in Kenexa LMS on Cloud (medium 5.4)
- [CVE-2016-8934](https://insights.sbomify.com/CVE-2016-8934/): Cross-site scripting in WebSphere Application Server for Bluemix (medium 5.4)
- [CVE-2016-8933](https://insights.sbomify.com/CVE-2016-8933/): Path traversal in Kenexa LMS on Cloud (medium 6.5)
- [CVE-2016-8932](https://insights.sbomify.com/CVE-2016-8932/): File upload in Kenexa LMS on Cloud (high 8.8)
- [CVE-2016-8931](https://insights.sbomify.com/CVE-2016-8931/): File upload in Kenexa LMS on Cloud (high 8.8)
- [CVE-2016-8930](https://insights.sbomify.com/CVE-2016-8930/): SQL injection in Kenexa LMS on Cloud (high 7.6)
- [CVE-2016-8929](https://insights.sbomify.com/CVE-2016-8929/): SQL injection in Kenexa LMS on Cloud (medium 5.4)
- [CVE-2016-8928](https://insights.sbomify.com/CVE-2016-8928/): SQL injection in Kenexa LMS on Cloud (high 7.6)
- [CVE-2016-8927](https://insights.sbomify.com/CVE-2016-8927/): Cross-site scripting in Tivoli Application Dependency Discovery Manager (medium 5.4)
- [CVE-2016-8926](https://insights.sbomify.com/CVE-2016-8926/): Information disclosure in Tivoli Application Dependency Discovery Manager (medium 4.3)
- [CVE-2016-8925](https://insights.sbomify.com/CVE-2016-8925/): Path traversal in Tivoli Application Dependency Discovery Manager (medium 6.5)
- [CVE-2016-8924](https://insights.sbomify.com/CVE-2016-8924/): Cross-site scripting in Maximo Asset Management (medium 5.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/8/