# Vulnerabilities published in 2016


- [CVE-2016-10405](https://insights.sbomify.com/CVE-2016-10405/): Auth bypass in d-link:dir-600l firmware (critical 9.8)
- [CVE-2016-10404](https://insights.sbomify.com/CVE-2016-10404/): Liferay Portal Vulnerable to XSS via a Crafted Redirect Field (medium 6.1)
- [CVE-2016-10403](https://insights.sbomify.com/CVE-2016-10403/): Memory corruption in Chrome (high 8.8)
- [CVE-2016-10402](https://insights.sbomify.com/CVE-2016-10402/): Integer overflow in avira:antivirus (high 7.8)
- [CVE-2016-10401](https://insights.sbomify.com/CVE-2016-10401/): Hardcoded credentials in zyxel:pk5001z firmware (high 8.8)
- [CVE-2016-10400](https://insights.sbomify.com/CVE-2016-10400/): Path traversal in atutor:atutor (high 7.5)
- [CVE-2016-1040](https://insights.sbomify.com/CVE-2016-1040/): Security feature bypass in adobe:acrobat (critical 9.8)
- [CVE-2016-10399](https://insights.sbomify.com/CVE-2016-10399/): Path traversal in sendio:sendio (high 7.5)
- [CVE-2016-10398](https://insights.sbomify.com/CVE-2016-10398/): Auth bypass in google:android (medium 6.2)
- [CVE-2016-10397](https://insights.sbomify.com/CVE-2016-10397/): Security feature bypass in php:php (high 7.5)
- [CVE-2016-10396](https://insights.sbomify.com/CVE-2016-10396/): Denial of service in ipsec-tools:ipsec-tools (high 7.5)
- [CVE-2016-10395](https://insights.sbomify.com/CVE-2016-10395/): Memory corruption in FlexNet Publisher (high 7.8)
- [CVE-2016-10394](https://insights.sbomify.com/CVE-2016-10394/): Improper Authentication in Core (critical 9.8)
- [CVE-2016-10393](https://insights.sbomify.com/CVE-2016-10393/): Integer overflow in google:android (critical 9.8)
- [CVE-2016-10392](https://insights.sbomify.com/CVE-2016-10392/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2016-10391](https://insights.sbomify.com/CVE-2016-10391/): Memory corruption in All Qualcomm products (critical 9.8)
- [CVE-2016-10390](https://insights.sbomify.com/CVE-2016-10390/): Denial of service in google:android (critical 9.8)
- [CVE-2016-1039](https://insights.sbomify.com/CVE-2016-1039/): Security feature bypass in adobe:acrobat (critical 9.8)
- [CVE-2016-10389](https://insights.sbomify.com/CVE-2016-10389/): Memory corruption in All Qualcomm products (high 7.8)
- [CVE-2016-10388](https://insights.sbomify.com/CVE-2016-10388/): Misconfiguration in All Qualcomm products (critical 9.8)
- [CVE-2016-10387](https://insights.sbomify.com/CVE-2016-10387/): Denial of service in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2016-10386](https://insights.sbomify.com/CVE-2016-10386/): Memory corruption in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2016-10385](https://insights.sbomify.com/CVE-2016-10385/): Use after free in Snapdragon Mobile (critical 9.8)
- [CVE-2016-10384](https://insights.sbomify.com/CVE-2016-10384/): Denial of service in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2016-10383](https://insights.sbomify.com/CVE-2016-10383/): Race condition in All Qualcomm products (high 8.1)
- [CVE-2016-10382](https://insights.sbomify.com/CVE-2016-10382/): Missing authorization in All Qualcomm products (critical 9.8)
- [CVE-2016-10381](https://insights.sbomify.com/CVE-2016-10381/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2016-10380](https://insights.sbomify.com/CVE-2016-10380/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2016-1038](https://insights.sbomify.com/CVE-2016-1038/): Security feature bypass in adobe:acrobat (critical 10.0)
- [CVE-2016-10379](https://insights.sbomify.com/CVE-2016-10379/): SQL injection in virtuemart:virtuemart (high 7.2)
- [CVE-2016-10378](https://insights.sbomify.com/CVE-2016-10378/): SQL injection in e107:e107 (high 7.2)
- [CVE-2016-10377](https://insights.sbomify.com/CVE-2016-10377/): Integer overflow in openvswitch:openvswitch (high 8.8)
- [CVE-2016-10376](https://insights.sbomify.com/CVE-2016-10376/): Security feature bypass in gajim:gajim (medium 4.5)
- [CVE-2016-10375](https://insights.sbomify.com/CVE-2016-10375/): Memory corruption in yodl project:yodl (critical 9.8)
- [CVE-2016-10374](https://insights.sbomify.com/CVE-2016-10374/): Other in perltidy project:perltidy (medium 5.5)
- [CVE-2016-10372](https://insights.sbomify.com/CVE-2016-10372/): Command injection in eir:d1000 modem firmware (critical 9.8)
- [CVE-2016-10371](https://insights.sbomify.com/CVE-2016-10371/): Denial of service in libtiff:libtiff (medium 5.5)
- [CVE-2016-10370](https://insights.sbomify.com/CVE-2016-10370/): Weak cryptography in oneplus:oxygenos (high 7.5)
- [CVE-2016-1037](https://insights.sbomify.com/CVE-2016-1037/): Memory corruption in adobe:acrobat (critical 9.8)
- [CVE-2016-10369](https://insights.sbomify.com/CVE-2016-10369/): Other in lxterminal project:lxterminal (high 7.8)
- [CVE-2016-10368](https://insights.sbomify.com/CVE-2016-10368/): Open redirect in opsview:opsview (medium 6.1)
- [CVE-2016-10367](https://insights.sbomify.com/CVE-2016-10367/): Path traversal in opsview:opsview (high 7.5)
- [CVE-2016-10366](https://insights.sbomify.com/CVE-2016-10366/): Cross-site scripting in Kibana (medium 6.1)
- [CVE-2016-10365](https://insights.sbomify.com/CVE-2016-10365/): Open redirect in Kibana (medium 6.1)
- [CVE-2016-10364](https://insights.sbomify.com/CVE-2016-10364/): Missing authorization in Elastic X-Pack Security (medium 6.5)
- [CVE-2016-10363](https://insights.sbomify.com/CVE-2016-10363/): Denial of service in Logstash (high 7.5)
- [CVE-2016-10362](https://insights.sbomify.com/CVE-2016-10362/): Logstash Logs Sensitive Information (medium 6.5)
- [CVE-2016-1036](https://insights.sbomify.com/CVE-2016-1036/): Cross-site scripting in adobe:analytics appmeasurement for flash library (medium 6.1)
- [CVE-2016-10351](https://insights.sbomify.com/CVE-2016-10351/): Information disclosure in telegram desktop:telegram desktop (medium 5.5)
- [CVE-2016-10350](https://insights.sbomify.com/CVE-2016-10350/): Memory corruption in libarchive:libarchive (medium 5.5)
- [CVE-2016-1035](https://insights.sbomify.com/CVE-2016-1035/): Information disclosure in adobe:robohelp (high 7.5)
- [CVE-2016-10349](https://insights.sbomify.com/CVE-2016-10349/): Memory corruption in libarchive:libarchive (medium 5.5)
- [CVE-2016-10347](https://insights.sbomify.com/CVE-2016-10347/): Other in All Qualcomm products (critical 9.8)
- [CVE-2016-10346](https://insights.sbomify.com/CVE-2016-10346/): Integer overflow in All Qualcomm products (critical 9.8)
- [CVE-2016-10345](https://insights.sbomify.com/CVE-2016-10345/): Phusion Passenger uses a known /tmp filename (high 7.8)
- [CVE-2016-10344](https://insights.sbomify.com/CVE-2016-10344/): Memory corruption in All Qualcomm products (critical 9.8)
- [CVE-2016-10343](https://insights.sbomify.com/CVE-2016-10343/): Denial of service in All Qualcomm products (critical 9.8)
- [CVE-2016-10342](https://insights.sbomify.com/CVE-2016-10342/): Memory corruption in All Qualcomm products (high 7.8)
- [CVE-2016-10341](https://insights.sbomify.com/CVE-2016-10341/): Privilege escalation in All Qualcomm products (high 7.8)
- [CVE-2016-10340](https://insights.sbomify.com/CVE-2016-10340/): Integer overflow in All Qualcomm products (high 7.8)
- [CVE-2016-1034](https://insights.sbomify.com/CVE-2016-1034/): Other in adobe:creative cloud (critical 9.1)
- [CVE-2016-10339](https://insights.sbomify.com/CVE-2016-10339/): Information disclosure in All Qualcomm products (high 7.1)
- [CVE-2016-10338](https://insights.sbomify.com/CVE-2016-10338/): Other in All Qualcomm products (high 7.8)
- [CVE-2016-10337](https://insights.sbomify.com/CVE-2016-10337/): Security feature bypass in All Qualcomm products (medium 5.5)
- [CVE-2016-10336](https://insights.sbomify.com/CVE-2016-10336/): Security feature bypass in All Qualcomm products (medium 5.5)
- [CVE-2016-10335](https://insights.sbomify.com/CVE-2016-10335/): Other in All Qualcomm products (medium 5.5)
- [CVE-2016-10334](https://insights.sbomify.com/CVE-2016-10334/): Security feature bypass in All Qualcomm products (medium 5.5)
- [CVE-2016-10333](https://insights.sbomify.com/CVE-2016-10333/): Missing authorization in All Qualcomm products (medium 5.5)
- [CVE-2016-10332](https://insights.sbomify.com/CVE-2016-10332/): Security feature bypass in All Qualcomm products (medium 5.5)
- [CVE-2016-10331](https://insights.sbomify.com/CVE-2016-10331/): Path traversal in Synology Photo Station (high 7.5)
- [CVE-2016-10330](https://insights.sbomify.com/CVE-2016-10330/): Path traversal in Synology Photo Station (high 7.1)
- [CVE-2016-1033](https://insights.sbomify.com/CVE-2016-1033/): Memory corruption in adobe:air desktop runtime (high 8.8)
- [CVE-2016-10329](https://insights.sbomify.com/CVE-2016-10329/): Command injection in Synology Photo Station (critical 9.8)
- [CVE-2016-10328](https://insights.sbomify.com/CVE-2016-10328/): Memory corruption in freetype:freetype (critical 9.8)
- [CVE-2016-10327](https://insights.sbomify.com/CVE-2016-10327/): Memory corruption in libreoffice:libreoffice (critical 9.8)
- [CVE-2016-10326](https://insights.sbomify.com/CVE-2016-10326/): Memory corruption in gnu:osip (high 7.5)
- [CVE-2016-10325](https://insights.sbomify.com/CVE-2016-10325/): Memory corruption in gnu:osip (high 7.5)
- [CVE-2016-10324](https://insights.sbomify.com/CVE-2016-10324/): Memory corruption in gnu:osip (critical 9.8)
- [CVE-2016-10323](https://insights.sbomify.com/CVE-2016-10323/): Privilege escalation in synology:photo station (high 7.8)
- [CVE-2016-10322](https://insights.sbomify.com/CVE-2016-10322/): Command injection in synology:photo station (high 8.8)
- [CVE-2016-10321](https://insights.sbomify.com/CVE-2016-10321/): web2py is vulnerable to password brute-force attack (critical 9.8)
- [CVE-2016-10320](https://insights.sbomify.com/CVE-2016-10320/): Command injection in textract project:textract (high 7.8)
- [CVE-2016-1032](https://insights.sbomify.com/CVE-2016-1032/): Memory corruption in adobe:air desktop runtime (high 8.8)
- [CVE-2016-10319](https://insights.sbomify.com/CVE-2016-10319/): Integer overflow in arm trusted firmware project:arm trusted firmware (medium 5.9)
- [CVE-2016-10318](https://insights.sbomify.com/CVE-2016-10318/): Missing authorization in linux:linux kernel (medium 6.5)
- [CVE-2016-10317](https://insights.sbomify.com/CVE-2016-10317/): Memory corruption in artifex:ghostscript (high 7.8)
- [CVE-2016-10316](https://insights.sbomify.com/CVE-2016-10316/): Open redirect in jensenofscandinavia:al3g firmware (medium 6.1)
- [CVE-2016-10315](https://insights.sbomify.com/CVE-2016-10315/): Open redirect in jensenofscandinavia:al3g firmware (medium 6.1)
- [CVE-2016-10314](https://insights.sbomify.com/CVE-2016-10314/): Information disclosure in jensenofscandinavia:al3g firmware (high 8.8)
- [CVE-2016-10313](https://insights.sbomify.com/CVE-2016-10313/): Cross-site request forgery in jensenofscandinavia:al3g firmware (high 8.8)
- [CVE-2016-10312](https://insights.sbomify.com/CVE-2016-10312/): Command injection in jensenofscandinavia:al3g firmware (critical 9.8)
- [CVE-2016-10311](https://insights.sbomify.com/CVE-2016-10311/): Memory corruption in sap:netweaver (critical 9.8)
- [CVE-2016-10310](https://insights.sbomify.com/CVE-2016-10310/): Memory corruption in sap:sql anywhere (medium 4.9)
- [CVE-2016-1031](https://insights.sbomify.com/CVE-2016-1031/): Use after free in adobe:air desktop runtime (high 8.8)
- [CVE-2016-10309](https://insights.sbomify.com/CVE-2016-10309/): Auth bypass in ceragon:fibeair ip-10 firmware (critical 9.8)
- [CVE-2016-10308](https://insights.sbomify.com/CVE-2016-10308/): Hardcoded credentials in siklu:etherhaul firmware (critical 9.8)
- [CVE-2016-10307](https://insights.sbomify.com/CVE-2016-10307/): Hardcoded credentials in gotrango:apex lynx firmware (critical 9.8)
- [CVE-2016-10306](https://insights.sbomify.com/CVE-2016-10306/): Hardcoded credentials in trango:a600 firmware (critical 9.8)
- [CVE-2016-10305](https://insights.sbomify.com/CVE-2016-10305/): Hardcoded credentials in gotrango:apex firmware (critical 9.8)
- [CVE-2016-10304](https://insights.sbomify.com/CVE-2016-10304/): Deserialization in sap:netweaver application server java (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/81/