# Vulnerabilities published in 2016


- [CVE-2016-1020](https://insights.sbomify.com/CVE-2016-1020/): Memory corruption in adobe:air desktop runtime (high 8.8)
- [CVE-2016-10199](https://insights.sbomify.com/CVE-2016-10199/): Memory corruption in gstreamer:gstreamer (high 7.5)
- [CVE-2016-10198](https://insights.sbomify.com/CVE-2016-10198/): Memory corruption in gstreamer:gstreamer (medium 5.5)
- [CVE-2016-10197](https://insights.sbomify.com/CVE-2016-10197/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2016-10196](https://insights.sbomify.com/CVE-2016-10196/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2016-10195](https://insights.sbomify.com/CVE-2016-10195/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2016-10194](https://insights.sbomify.com/CVE-2016-10194/): festivaltts4r allows arbitrary command execution (critical 9.8)
- [CVE-2016-10193](https://insights.sbomify.com/CVE-2016-10193/): espeak-ruby allows arbitrary command execution (critical 9.8)
- [CVE-2016-10192](https://insights.sbomify.com/CVE-2016-10192/): Memory corruption in ffmpeg:ffmpeg (critical 9.8)
- [CVE-2016-10191](https://insights.sbomify.com/CVE-2016-10191/): Memory corruption in ffmpeg:ffmpeg (critical 9.8)
- [CVE-2016-10190](https://insights.sbomify.com/CVE-2016-10190/): Memory corruption in ffmpeg:ffmpeg (critical 9.8)
- [CVE-2016-1019](https://insights.sbomify.com/CVE-2016-1019/): Adobe Flash Player Arbitrary Code Execution (high 7.8, exploited in the wild)
- [CVE-2016-10189](https://insights.sbomify.com/CVE-2016-10189/): Null dereference in bitlbee:bitlbee (high 7.5)
- [CVE-2016-10188](https://insights.sbomify.com/CVE-2016-10188/): Use after free in bitlbee:bitlbee (critical 9.8)
- [CVE-2016-10187](https://insights.sbomify.com/CVE-2016-10187/): Information disclosure in calibre-ebook:calibre (medium 5.5)
- [CVE-2016-10186](https://insights.sbomify.com/CVE-2016-10186/): Misconfiguration in dlink:dwr-932b firmware (high 7.5)
- [CVE-2016-10185](https://insights.sbomify.com/CVE-2016-10185/): Misconfiguration in dlink:dwr-932b firmware (high 7.5)
- [CVE-2016-10184](https://insights.sbomify.com/CVE-2016-10184/): Path traversal in dlink:dwr-932b firmware (high 7.5)
- [CVE-2016-10183](https://insights.sbomify.com/CVE-2016-10183/): Path traversal in dlink:dwr-932b firmware (high 7.5)
- [CVE-2016-10182](https://insights.sbomify.com/CVE-2016-10182/): Command injection in dlink:dwr-932b firmware (critical 9.8)
- [CVE-2016-10181](https://insights.sbomify.com/CVE-2016-10181/): Information disclosure in dlink:dwr-932b firmware (high 7.5)
- [CVE-2016-10180](https://insights.sbomify.com/CVE-2016-10180/): Weak cryptography in dlink:dwr-932b firmware (high 7.5)
- [CVE-2016-1018](https://insights.sbomify.com/CVE-2016-1018/): Memory corruption in adobe:air desktop runtime (high 8.8)
- [CVE-2016-10179](https://insights.sbomify.com/CVE-2016-10179/): Hardcoded credentials in dlink:dwr-932b firmware (high 7.5)
- [CVE-2016-10178](https://insights.sbomify.com/CVE-2016-10178/): Command injection in dlink:dwr-932b firmware (critical 9.8)
- [CVE-2016-10177](https://insights.sbomify.com/CVE-2016-10177/): Hardcoded credentials in dlink:dwr-932b firmware (critical 9.8)
- [CVE-2016-10176](https://insights.sbomify.com/CVE-2016-10176/): Missing authorization in netgear:wnr2000v5 firmware (critical 9.8)
- [CVE-2016-10175](https://insights.sbomify.com/CVE-2016-10175/): Information disclosure in netgear:wnr2000v5 firmware (critical 9.8)
- [CVE-2016-10174](https://insights.sbomify.com/CVE-2016-10174/): NETGEAR WNR2000v5 Router Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2016-10173](https://insights.sbomify.com/CVE-2016-10173/): archive-tar-minitar and minitar vulnerable to Path Traversal (high 7.5)
- [CVE-2016-10172](https://insights.sbomify.com/CVE-2016-10172/): Memory corruption in wavpack project:wavpack (medium 5.5)
- [CVE-2016-10171](https://insights.sbomify.com/CVE-2016-10171/): Memory corruption in wavpack project:wavpack (medium 5.5)
- [CVE-2016-10170](https://insights.sbomify.com/CVE-2016-10170/): Memory corruption in wavpack project:wavpack (medium 5.5)
- [CVE-2016-1017](https://insights.sbomify.com/CVE-2016-1017/): Use after free in adobe:air desktop runtime (high 8.8)
- [CVE-2016-10169](https://insights.sbomify.com/CVE-2016-10169/): Memory corruption in wavpack project:wavpack (medium 5.5)
- [CVE-2016-10168](https://insights.sbomify.com/CVE-2016-10168/): Integer overflow in libgd:libgd (high 7.8)
- [CVE-2016-10167](https://insights.sbomify.com/CVE-2016-10167/): Denial of service in libgd:libgd (medium 5.5)
- [CVE-2016-10166](https://insights.sbomify.com/CVE-2016-10166/): Integer overflow in libgd:libgd (critical 9.8)
- [CVE-2016-10165](https://insights.sbomify.com/CVE-2016-10165/): Memory corruption in canonical:ubuntu linux (high 7.1)
- [CVE-2016-10164](https://insights.sbomify.com/CVE-2016-10164/): Integer overflow in x.org:libxpm (critical 9.8)
- [CVE-2016-10163](https://insights.sbomify.com/CVE-2016-10163/): Denial of service in virglrenderer project:virglrenderer (medium 6.5)
- [CVE-2016-10162](https://insights.sbomify.com/CVE-2016-10162/): Null dereference in php:php (high 7.5)
- [CVE-2016-10161](https://insights.sbomify.com/CVE-2016-10161/): Memory corruption in php:php (high 7.5)
- [CVE-2016-10160](https://insights.sbomify.com/CVE-2016-10160/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2016-1016](https://insights.sbomify.com/CVE-2016-1016/): Use after free in adobe:air desktop runtime (high 8.8)
- [CVE-2016-10159](https://insights.sbomify.com/CVE-2016-10159/): Integer overflow in debian:debian linux (high 7.5)
- [CVE-2016-10158](https://insights.sbomify.com/CVE-2016-10158/): Denial of service in php:php (high 7.5)
- [CVE-2016-10157](https://insights.sbomify.com/CVE-2016-10157/): Code injection in akamai:netsession (critical 9.8)
- [CVE-2016-10156](https://insights.sbomify.com/CVE-2016-10156/): Privilege escalation in systemd project:systemd (high 7.8)
- [CVE-2016-10155](https://insights.sbomify.com/CVE-2016-10155/): Denial of service in debian:debian linux (medium 6.0)
- [CVE-2016-10154](https://insights.sbomify.com/CVE-2016-10154/): Memory corruption in linux:linux kernel (medium 5.5)
- [CVE-2016-10153](https://insights.sbomify.com/CVE-2016-10153/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2016-10152](https://insights.sbomify.com/CVE-2016-10152/): Privilege escalation in hesiod project:hesiod (critical 9.8)
- [CVE-2016-10151](https://insights.sbomify.com/CVE-2016-10151/): Privilege escalation in hesiod project:hesiod (high 7.0)
- [CVE-2016-10150](https://insights.sbomify.com/CVE-2016-10150/): Use after free in linux:linux kernel (critical 9.8)
- [CVE-2016-1015](https://insights.sbomify.com/CVE-2016-1015/): Memory corruption in adobe:air desktop runtime (high 8.8)
- [CVE-2016-10149](https://insights.sbomify.com/CVE-2016-10149/): Pysaml2 does not sanitize XML responses (high 7.5)
- [CVE-2016-10148](https://insights.sbomify.com/CVE-2016-10148/): Missing authorization in wordpress:wordpress (medium 4.3)
- [CVE-2016-10147](https://insights.sbomify.com/CVE-2016-10147/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2016-10146](https://insights.sbomify.com/CVE-2016-10146/): Denial of service in imagemagick:imagemagick (high 7.5)
- [CVE-2016-10145](https://insights.sbomify.com/CVE-2016-10145/): Memory corruption in imagemagick:imagemagick (critical 9.8)
- [CVE-2016-10144](https://insights.sbomify.com/CVE-2016-10144/): Memory corruption in imagemagick:imagemagick (critical 9.8)
- [CVE-2016-10143](https://insights.sbomify.com/CVE-2016-10143/): Path traversal in tiki:tikiwiki cms\/groupware (high 7.5)
- [CVE-2016-10142](https://insights.sbomify.com/CVE-2016-10142/): Denial of service in ietf:ipv6 (high 8.6)
- [CVE-2016-10141](https://insights.sbomify.com/CVE-2016-10141/): Integer overflow in artifex:mujs (critical 9.8)
- [CVE-2016-10140](https://insights.sbomify.com/CVE-2016-10140/): Information disclosure in zoneminder:zoneminder (high 7.5)
- [CVE-2016-1014](https://insights.sbomify.com/CVE-2016-1014/): Privilege escalation in adobe:air desktop runtime (high 7.3)
- [CVE-2016-10139](https://insights.sbomify.com/CVE-2016-10139/): Information disclosure in adups:adups fota (high 7.8)
- [CVE-2016-10138](https://insights.sbomify.com/CVE-2016-10138/): Missing authorization in adups:adups fota (high 7.8)
- [CVE-2016-10137](https://insights.sbomify.com/CVE-2016-10137/): Missing authorization in adups:adups fota (high 7.8)
- [CVE-2016-10136](https://insights.sbomify.com/CVE-2016-10136/): Privilege escalation in adups:adups fota (high 7.8)
- [CVE-2016-10135](https://insights.sbomify.com/CVE-2016-10135/): Information disclosure in lg:lg mobile (medium 5.5)
- [CVE-2016-10134](https://insights.sbomify.com/CVE-2016-10134/): SQL injection in zabbix:zabbix (critical 9.8)
- [CVE-2016-10133](https://insights.sbomify.com/CVE-2016-10133/): Memory corruption in artifex:mujs (critical 9.8)
- [CVE-2016-10132](https://insights.sbomify.com/CVE-2016-10132/): Null dereference in artifex:mujs (high 7.5)
- [CVE-2016-10131](https://insights.sbomify.com/CVE-2016-10131/): CodeIgniter arbitrary code execution (critical 9.8)
- [CVE-2016-10130](https://insights.sbomify.com/CVE-2016-10130/): Security feature bypass in libgit2 project:libgit2 (medium 5.9)
- [CVE-2016-1013](https://insights.sbomify.com/CVE-2016-1013/): Use after free in adobe:air desktop runtime (high 8.8)
- [CVE-2016-10129](https://insights.sbomify.com/CVE-2016-10129/): Null dereference in libgit2 project:libgit2 (high 7.5)
- [CVE-2016-10128](https://insights.sbomify.com/CVE-2016-10128/): Memory corruption in libgit2 project:libgit2 (critical 9.8)
- [CVE-2016-10127](https://insights.sbomify.com/CVE-2016-10127/): PySAML2 XML external entity attack (critical 9.0)
- [CVE-2016-10126](https://insights.sbomify.com/CVE-2016-10126/): Other in splunk:splunk (critical 9.8)
- [CVE-2016-10125](https://insights.sbomify.com/CVE-2016-10125/): Hardcoded credentials in dlink:dgs-1100 firmware (high 8.1)
- [CVE-2016-10124](https://insights.sbomify.com/CVE-2016-10124/): Security feature bypass in linuxcontainers:lxc (high 8.6)
- [CVE-2016-10123](https://insights.sbomify.com/CVE-2016-10123/): Privilege escalation in firejail project:firejail (high 7.8)
- [CVE-2016-10122](https://insights.sbomify.com/CVE-2016-10122/): Privilege escalation in firejail project:firejail (high 7.8)
- [CVE-2016-10121](https://insights.sbomify.com/CVE-2016-10121/): Misconfiguration in firejail project:firejail (high 7.8)
- [CVE-2016-10120](https://insights.sbomify.com/CVE-2016-10120/): Misconfiguration in firejail project:firejail (high 7.8)
- [CVE-2016-1012](https://insights.sbomify.com/CVE-2016-1012/): Memory corruption in adobe:air desktop runtime (high 8.8)
- [CVE-2016-10119](https://insights.sbomify.com/CVE-2016-10119/): Misconfiguration in firejail project:firejail (high 7.8)
- [CVE-2016-10118](https://insights.sbomify.com/CVE-2016-10118/): Privilege escalation in firejail project:firejail (low 3.3)
- [CVE-2016-10117](https://insights.sbomify.com/CVE-2016-10117/): Privilege escalation in firejail project:firejail (high 7.8)
- [CVE-2016-10116](https://insights.sbomify.com/CVE-2016-10116/): Weak cryptography in netgear:arlo base station firmware (high 8.1)
- [CVE-2016-10115](https://insights.sbomify.com/CVE-2016-10115/): Hardcoded credentials in netgear:arlo base station firmware (critical 9.8)
- [CVE-2016-10114](https://insights.sbomify.com/CVE-2016-10114/): SQL injection in awebsupport:aweb cart watching system for virtuemart (critical 9.8)
- [CVE-2016-10112](https://insights.sbomify.com/CVE-2016-10112/): Cross-site scripting in woocommerce:woocommerce (medium 4.8)
- [CVE-2016-1011](https://insights.sbomify.com/CVE-2016-1011/): Use after free in adobe:air desktop runtime (high 8.8)
- [CVE-2016-10109](https://insights.sbomify.com/CVE-2016-10109/): Use after free in canonical:ubuntu linux (high 7.5)
- [CVE-2016-10108](https://insights.sbomify.com/CVE-2016-10108/): Command injection in western digital:mycloud nas (critical 9.8)
- [CVE-2016-10107](https://insights.sbomify.com/CVE-2016-10107/): Command injection in western digital:mycloud nas (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/83/