# Vulnerabilities published in 2016


- [CVE-2016-10106](https://insights.sbomify.com/CVE-2016-10106/): Path traversal in netgear:fvs318gv2 firmware (medium 6.5)
- [CVE-2016-10105](https://insights.sbomify.com/CVE-2016-10105/): Path traversal in piwigo:piwigo (critical 9.8)
- [CVE-2016-10104](https://insights.sbomify.com/CVE-2016-10104/): Information disclosure in hiteksoftware:automize (medium 5.9)
- [CVE-2016-10103](https://insights.sbomify.com/CVE-2016-10103/): Information disclosure in hiteksoftware:automize (high 8.1)
- [CVE-2016-10102](https://insights.sbomify.com/CVE-2016-10102/): Weak cryptography in hiteksoftware:automize (high 8.1)
- [CVE-2016-10101](https://insights.sbomify.com/CVE-2016-10101/): Weak cryptography in hiteksoftware:automize (high 8.1)
- [CVE-2016-10100](https://insights.sbomify.com/CVE-2016-10100/): Path traversal in borg:borg (medium 5.3)
- [CVE-2016-1010](https://insights.sbomify.com/CVE-2016-1010/): Adobe Flash Player and AIR Integer Overflow (high 8.8, exploited in the wild)
- [CVE-2016-10099](https://insights.sbomify.com/CVE-2016-10099/): Weak cryptography in borg project:borg (medium 5.3)
- [CVE-2016-10098](https://insights.sbomify.com/CVE-2016-10098/): Command injection in sendquick:avera sms gateway firmware (critical 9.8)
- [CVE-2016-10097](https://insights.sbomify.com/CVE-2016-10097/): XML external entity in forgerock:openam (high 7.5)
- [CVE-2016-10096](https://insights.sbomify.com/CVE-2016-10096/): GeniXCMS SQL injection vulnerability (high 7.3)
- [CVE-2016-10095](https://insights.sbomify.com/CVE-2016-10095/): Memory corruption in libtiff:libtiff (medium 5.5)
- [CVE-2016-10094](https://insights.sbomify.com/CVE-2016-10094/): Memory corruption in libtiff:libtiff (high 7.8)
- [CVE-2016-10093](https://insights.sbomify.com/CVE-2016-10093/): Integer overflow in libtiff:libtiff (high 7.8)
- [CVE-2016-10092](https://insights.sbomify.com/CVE-2016-10092/): Memory corruption in libtiff:libtiff (high 7.8)
- [CVE-2016-10091](https://insights.sbomify.com/CVE-2016-10091/): Memory corruption in unrtf project:unrtf (high 7.5)
- [CVE-2016-1009](https://insights.sbomify.com/CVE-2016-1009/): Memory corruption in adobe:acrobat (critical 9.8)
- [CVE-2016-10089](https://insights.sbomify.com/CVE-2016-10089/): Privilege escalation in nagios:nagios (high 7.8)
- [CVE-2016-10088](https://insights.sbomify.com/CVE-2016-10088/): Use after free in linux:linux kernel (high 7.0)
- [CVE-2016-10087](https://insights.sbomify.com/CVE-2016-10087/): Null dereference in libpng:libpng (high 7.5)
- [CVE-2016-10086](https://insights.sbomify.com/CVE-2016-10086/): Missing authorization in ca:service desk management (high 8.1)
- [CVE-2016-10085](https://insights.sbomify.com/CVE-2016-10085/): Path traversal in piwigo:piwigo (high 7.2)
- [CVE-2016-10084](https://insights.sbomify.com/CVE-2016-10084/): Path traversal in piwigo:piwigo (high 7.2)
- [CVE-2016-10083](https://insights.sbomify.com/CVE-2016-10083/): Cross-site scripting in piwigo:piwigo (medium 6.1)
- [CVE-2016-10082](https://insights.sbomify.com/CVE-2016-10082/): Code injection in s9y:serendipity (critical 9.8)
- [CVE-2016-10081](https://insights.sbomify.com/CVE-2016-10081/): Command injection in shutter-project:shutter (high 7.8)
- [CVE-2016-1008](https://insights.sbomify.com/CVE-2016-1008/): Other in adobe:acrobat (high 8.4)
- [CVE-2016-10079](https://insights.sbomify.com/CVE-2016-10079/): Denial of service in sap:saplpd (high 7.5)
- [CVE-2016-10075](https://insights.sbomify.com/CVE-2016-10075/): TDQM Arbitrary Code Execution (high 7.8)
- [CVE-2016-10074](https://insights.sbomify.com/CVE-2016-10074/): Swift Mailer mail transport Command Injection (critical 9.8)
- [CVE-2016-10073](https://insights.sbomify.com/CVE-2016-10073/): Information disclosure in vanillaforums:vanilla (high 7.5)
- [CVE-2016-10072](https://insights.sbomify.com/CVE-2016-10072/): Misconfiguration in wampserver:wampserver (medium 5.3)
- [CVE-2016-10071](https://insights.sbomify.com/CVE-2016-10071/): Memory corruption in imagemagick:imagemagick (medium 5.5)
- [CVE-2016-10070](https://insights.sbomify.com/CVE-2016-10070/): Memory corruption in imagemagick:imagemagick (medium 5.5)
- [CVE-2016-1007](https://insights.sbomify.com/CVE-2016-1007/): Memory corruption in adobe:acrobat (critical 9.8)
- [CVE-2016-10069](https://insights.sbomify.com/CVE-2016-10069/): Denial of service in imagemagick:imagemagick (medium 5.5)
- [CVE-2016-10068](https://insights.sbomify.com/CVE-2016-10068/): Denial of service in imagemagick:imagemagick (medium 5.5)
- [CVE-2016-10067](https://insights.sbomify.com/CVE-2016-10067/): Memory corruption in imagemagick:imagemagick (high 7.5)
- [CVE-2016-10066](https://insights.sbomify.com/CVE-2016-10066/): Memory corruption in imagemagick:imagemagick (medium 5.5)
- [CVE-2016-10065](https://insights.sbomify.com/CVE-2016-10065/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2016-10064](https://insights.sbomify.com/CVE-2016-10064/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2016-10063](https://insights.sbomify.com/CVE-2016-10063/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2016-10062](https://insights.sbomify.com/CVE-2016-10062/): Denial of service in imagemagick:imagemagick (medium 5.5)
- [CVE-2016-10061](https://insights.sbomify.com/CVE-2016-10061/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2016-10060](https://insights.sbomify.com/CVE-2016-10060/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2016-1006](https://insights.sbomify.com/CVE-2016-1006/): Security feature bypass in adobe:air desktop runtime (high 8.1)
- [CVE-2016-10059](https://insights.sbomify.com/CVE-2016-10059/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2016-10058](https://insights.sbomify.com/CVE-2016-10058/): Denial of service in imagemagick:imagemagick (medium 5.5)
- [CVE-2016-10057](https://insights.sbomify.com/CVE-2016-10057/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2016-10056](https://insights.sbomify.com/CVE-2016-10056/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2016-10055](https://insights.sbomify.com/CVE-2016-10055/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2016-10054](https://insights.sbomify.com/CVE-2016-10054/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2016-10053](https://insights.sbomify.com/CVE-2016-10053/): Denial of service in imagemagick:imagemagick (medium 5.5)
- [CVE-2016-10052](https://insights.sbomify.com/CVE-2016-10052/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2016-10051](https://insights.sbomify.com/CVE-2016-10051/): Use after free in imagemagick:imagemagick (high 7.8)
- [CVE-2016-10050](https://insights.sbomify.com/CVE-2016-10050/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2016-1005](https://insights.sbomify.com/CVE-2016-1005/): Memory corruption in adobe:air (high 8.8)
- [CVE-2016-10049](https://insights.sbomify.com/CVE-2016-10049/): Memory corruption in imagemagick:imagemagick (high 7.8)
- [CVE-2016-10048](https://insights.sbomify.com/CVE-2016-10048/): Path traversal in imagemagick:imagemagick (high 7.5)
- [CVE-2016-10047](https://insights.sbomify.com/CVE-2016-10047/): Denial of service in imagemagick:imagemagick (medium 5.5)
- [CVE-2016-10046](https://insights.sbomify.com/CVE-2016-10046/): Memory corruption in imagemagick:imagemagick (medium 5.5)
- [CVE-2016-10045](https://insights.sbomify.com/CVE-2016-10045/): Remote code execution in PHPMailer (critical 9.8)
- [CVE-2016-10044](https://insights.sbomify.com/CVE-2016-10044/): Privilege escalation in google:android (high 7.8)
- [CVE-2016-10043](https://insights.sbomify.com/CVE-2016-10043/): Command injection in mrf:web panel (critical 10.0)
- [CVE-2016-10042](https://insights.sbomify.com/CVE-2016-10042/): Missing authorization in arcadyan:swisscom internet-box firmware (high 7.5)
- [CVE-2016-10041](https://insights.sbomify.com/CVE-2016-10041/): Privilege escalation in sprecher-automation:sprecon-e service program (high 7.5)
- [CVE-2016-10040](https://insights.sbomify.com/CVE-2016-10040/): Memory corruption in qt:qxmlsimplereader (medium 5.5)
- [CVE-2016-10039](https://insights.sbomify.com/CVE-2016-10039/): Path traversal in modx:modx revolution (high 7.3)
- [CVE-2016-10038](https://insights.sbomify.com/CVE-2016-10038/): Path traversal in modx:modx revolution (high 7.3)
- [CVE-2016-10037](https://insights.sbomify.com/CVE-2016-10037/): Path traversal in modx:modx revolution (high 7.3)
- [CVE-2016-10036](https://insights.sbomify.com/CVE-2016-10036/): File upload in jfrog:artifactory (critical 9.8)
- [CVE-2016-10034](https://insights.sbomify.com/CVE-2016-10034/): zend-mail remote code execution via Sendmail adapter (critical 9.8)
- [CVE-2016-10033](https://insights.sbomify.com/CVE-2016-10033/): PHPMailer Command Injection (critical 9.8, exploited in the wild)
- [CVE-2016-10031](https://insights.sbomify.com/CVE-2016-10031/): Misconfiguration in wampserver:wampserver (high 7.5)
- [CVE-2016-10030](https://insights.sbomify.com/CVE-2016-10030/): Privilege escalation in schedmd:slurm (high 8.1)
- [CVE-2016-10029](https://insights.sbomify.com/CVE-2016-10029/): Memory corruption in qemu:qemu (medium 5.5)
- [CVE-2016-10028](https://insights.sbomify.com/CVE-2016-10028/): Memory corruption in qemu:qemu (medium 5.5)
- [CVE-2016-10027](https://insights.sbomify.com/CVE-2016-10027/): Smack allows the bypass of TLS protections (medium 5.9)
- [CVE-2016-10026](https://insights.sbomify.com/CVE-2016-10026/): Missing authorization in ikiwiki:ikiwiki (high 7.5)
- [CVE-2016-10025](https://insights.sbomify.com/CVE-2016-10025/): Null dereference in citrix:xenserver (medium 5.5)
- [CVE-2016-10024](https://insights.sbomify.com/CVE-2016-10024/): Denial of service in citrix:xenserver (medium 6.0)
- [CVE-2016-1002](https://insights.sbomify.com/CVE-2016-1002/): Memory corruption in adobe:air (high 8.8)
- [CVE-2016-10013](https://insights.sbomify.com/CVE-2016-10013/): Privilege escalation in xen:xen (high 7.8)
- [CVE-2016-10012](https://insights.sbomify.com/CVE-2016-10012/): Memory corruption in openbsd:openssh (high 7.8)
- [CVE-2016-10011](https://insights.sbomify.com/CVE-2016-10011/): Information disclosure in openbsd:openssh (medium 6.2)
- [CVE-2016-10010](https://insights.sbomify.com/CVE-2016-10010/): Privilege escalation in openbsd:openssh (high 7.0)
- [CVE-2016-1001](https://insights.sbomify.com/CVE-2016-1001/): Memory corruption in adobe:air (high 8.8)
- [CVE-2016-10009](https://insights.sbomify.com/CVE-2016-10009/): Other in openbsd:openssh (high 7.3)
- [CVE-2016-10008](https://insights.sbomify.com/CVE-2016-10008/): SQL injection in dotcms:dotcms (high 7.2)
- [CVE-2016-10007](https://insights.sbomify.com/CVE-2016-10007/): SQL injection in dotcms:dotcms (high 7.2)
- [CVE-2016-10006](https://insights.sbomify.com/CVE-2016-10006/): OWASP AntiSamy vulnerable to Cross-site Scripting (medium 6.1)
- [CVE-2016-10005](https://insights.sbomify.com/CVE-2016-10005/): Information disclosure in sap:solution manager (high 7.5)
- [CVE-2016-1000352](https://insights.sbomify.com/CVE-2016-1000352/): In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode (high 7.4)
- [CVE-2016-1000346](https://insights.sbomify.com/CVE-2016-1000346/): In Bouncy Castle JCE Provider the other party DH public key is not fully validated (low 3.7)
- [CVE-2016-1000345](https://insights.sbomify.com/CVE-2016-1000345/): Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 (medium 5.9)
- [CVE-2016-1000344](https://insights.sbomify.com/CVE-2016-1000344/): In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode (high 7.4)
- [CVE-2016-1000343](https://insights.sbomify.com/CVE-2016-1000343/): In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values (high 7.5)
- [CVE-2016-1000342](https://insights.sbomify.com/CVE-2016-1000342/): In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification (high 7.5)
- [CVE-2016-1000341](https://insights.sbomify.com/CVE-2016-1000341/): Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/84/