Vulnerabilities published in 2016
9,398 vulnerabilities were published in 2016: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 85 of 94.
- CVE-2016-1000340 The Bouncy Castle JCE Provider carry a propagation bug
- CVE-2016-1000339 Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
- CVE-2016-1000338 In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate
- CVE-2016-1000307 Cross-site scripting in clip-bucket:clipbucket
- CVE-2016-10003 Security feature bypass in squid-cache:squid
- CVE-2016-1000282 Critical severity vulnerability that affects Haraka
- CVE-2016-1000271 SQL injection in dthdevelopment:dt register
- CVE-2016-1000237 Cross-Site Scripting in sanitize-html
- CVE-2016-1000236 cookie-signature Timing Attack
- CVE-2016-1000232 ReDoS via long string of semicolons in tough-cookie
- CVE-2016-1000229 Improper Neutralization of Input During Web Page Generation in swagger-ui
- CVE-2016-1000222 Code injection in elastic:logstash
- CVE-2016-1000221 Logstash Logs Sensitive Information
- CVE-2016-1000220 Cross-site scripting in elastic:kibana
- CVE-2016-1000219 Information disclosure in elastic:kibana
- CVE-2016-1000218 Cross-site request forgery in elastic:kibana reporting
- CVE-2016-1000217 SQL injection in zotpress project:zotpress
- CVE-2016-1000216 Command injection in ruckus:wireless h500
- CVE-2016-1000215 Denial of service in ruckus:wireless h500
- CVE-2016-1000214 Auth bypass in ruckus:wireless h500
- CVE-2016-1000213 Cross-site request forgery in ruckus:wireless h500
- CVE-2016-10002 Information disclosure in debian:debian linux
- CVE-2016-1000156 File upload in mailcwp project:mailcwp
- CVE-2016-1000155 Cross-site scripting in wpsolr:wpsolr-search-engine
- CVE-2016-1000154 Cross-site scripting in browserweb:whizz
- CVE-2016-1000153 Cross-site scripting in tidio-gallery project:tidio-gallery
- CVE-2016-1000152 Cross-site scripting in tidio-form project:tidio-form
- CVE-2016-1000151 Cross-site scripting in tera-charts project:tera-charts
- CVE-2016-1000150 Cross-site scripting in oxil:simplified-content
- CVE-2016-1000149 Cross-site scripting in simpel-reserveren project:simpel-reserveren
- CVE-2016-1000148 Cross-site scripting in s3-video project:s3-video
- CVE-2016-1000147 Cross-site scripting in recipes-writer project:recipes-writer
- CVE-2016-1000146 Cross-site scripting in pondol-formmail project:pondol-formmail
- CVE-2016-1000145 Cross-site scripting in pondol-carousel project:pondol-carousel
- CVE-2016-1000144 Cross-site scripting in photoxhibit project:photoxhibit
- CVE-2016-1000143 Cross-site scripting in photoxhibit project:photoxhibit
- CVE-2016-1000142 Cross-site scripting in parsi-font project:parsi-font
- CVE-2016-1000141 Cross-site scripting in page-layout-builder project:page-layout-builder
- CVE-2016-1000140 Cross-site scripting in new-year-firework project:new-year-firework
- CVE-2016-1000139 Cross-site scripting in infusionsoft project:infusionsoft
- CVE-2016-1000138 Cross-site scripting in indexisto project:indexisto
- CVE-2016-1000137 Cross-site scripting in hero-maps-pro project:hero-maps-pro
- CVE-2016-1000136 Cross-site scripting in heat-trackr project:heat-trackr
- CVE-2016-1000135 Cross-site scripting in hdw-tube project:hdw-tube
- CVE-2016-1000134 Cross-site scripting in hdw-tube project:hdw-tube
- CVE-2016-1000133 Cross-site scripting in designsandcode:forget about shortcode buttons
- CVE-2016-1000132 Cross-site scripting in cminds:tooltip glossary
- CVE-2016-1000131 Cross-site scripting in e-search project:esearch
- CVE-2016-1000130 Cross-site scripting in e-search project:e-search
- CVE-2016-1000129 Cross-site scripting in defa-online-image-protector project:defa-online-image-protector
- CVE-2016-1000128 Cross-site scripting in anti-plagiarism project:anti-plagiarism
- CVE-2016-1000127 Cross-site scripting in ajax-random-post project:ajax-random-post
- CVE-2016-1000126 Cross-site scripting in admin-font-editor project:admin-font-editor
- CVE-2016-1000125 SQL injection in huge-it:huge-it catalog
- CVE-2016-1000124 SQL injection in huge-it:portfolio gallery
- CVE-2016-1000123 SQL injection in huge-it:video gallery
- CVE-2016-1000122 SQL injection in huge-it:slider
- CVE-2016-1000121 Cross-site scripting in huge-it:slider
- CVE-2016-1000120 SQL injection in huge-it:catalog
- CVE-2016-1000119 SQL injection in huge-it:catalog
- CVE-2016-1000118 XSS & SQLi in HugeIT slideshow v1.0.4
- CVE-2016-1000117 XSS & SQLi in HugeIT slideshow v1.0.4
- CVE-2016-1000116 SQL injection in huge-it:portfolio gallery manager
- CVE-2016-1000115 SQL injection in huge-it:portfolio gallery manager
- CVE-2016-1000114 XSS in huge IT gallery v1.1.5 for Joomla
- CVE-2016-1000113 SQL injection in huge-it:gallery
- CVE-2016-1000112 File upload in contussupport:contus-video-comments
- CVE-2016-1000111 Forced Browsing in Twisted
- CVE-2016-1000110 Open redirect in debian:debian linux
- CVE-2016-1000109 Other in facebook:hhvm
- CVE-2016-1000108 Open redirect in debian:debian linux
- CVE-2016-1000107 Open redirect in erlang:erlang\/otp
- CVE-2016-1000104 Security feature bypass in apache:mod fcgid
- CVE-2016-1000037 Cross-site scripting in fedoraproject:fedora
- CVE-2016-1000033 Security feature bypass in gnome:shotwell
- CVE-2016-1000032 Security feature bypass in python:tgcaptcha2
- CVE-2016-1000031 Improper Access Control in commons-fileupload
- CVE-2016-1000030 Memory corruption in pidgin:pidgin
- CVE-2016-1000029 Cross-site scripting in tenable:nessus
- CVE-2016-1000028 Cross-site scripting in tenable:nessus
- CVE-2016-1000027 Pivotal Spring Framework contains unsafe Java deserialization methods
- CVE-2016-1000009 Other in tp-link:tp-link
- CVE-2016-1000007 Pagure 2.2.1 XSS in raw file endpoint
- CVE-2016-1000006 Use after free in facebook:hhvm
- CVE-2016-1000005 Memory corruption in facebook:hhvm
- CVE-2016-1000004 Memory corruption in facebook:hhvm
- CVE-2016-1000003 Code injection in mirror manager project:mirror manager
- CVE-2016-1000002 Information disclosure in debian:debian linux
- CVE-2016-1000001 flask-oidc Open Redirect vulnerability
- CVE-2016-1000000 SQL injection in progress:whatsup gold
- CVE-2016-1000 Use after free in adobe:air
- CVE-2016-0999 Use after free in adobe:air
- CVE-2016-0998 Use after free in adobe:air
- CVE-2016-0997 Use after free in adobe:air
- CVE-2016-0996 Use after free in adobe:air
- CVE-2016-0995 Use after free in adobe:air
- CVE-2016-0994 Use after free in adobe:air
- CVE-2016-0993 Integer overflow in adobe:air
- CVE-2016-0992 Memory corruption in adobe:air
- CVE-2016-0991 Use after free in adobe:air