Vulnerabilities published in 2016
9,398 vulnerabilities were published in 2016: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 88 of 94.
- CVE-2016-0780 Denial of service in Cloud Foundry
- CVE-2016-0779 Deserialization in apache:tomee
- CVE-2016-0778 Memory corruption in apple:mac os x
- CVE-2016-0777 Information disclosure in apple:mac os x
- CVE-2016-0775 Pillow Buffer overflow in ImagingFliDecode
- CVE-2016-0774 Memory corruption in google:android
- CVE-2016-0773 Memory corruption in canonical:ubuntu linux
- CVE-2016-0772 Security feature bypass in python:python
- CVE-2016-0771 Memory corruption in samba:samba
- CVE-2016-0770 Cross-site scripting in zahmit design:connections business directory plugin
- CVE-2016-0769 SQL injection in elfden:eshop plugin
- CVE-2016-0768 Missing authorization in postgresql:postgresql
- CVE-2016-0767 PostgreSQL PL/Java Improper Privilege Management
- CVE-2016-0766 Privilege escalation in canonical:ubuntu linux
- CVE-2016-0765 Cross-site scripting in elfden:eshop plugin
- CVE-2016-0764 Race condition in redhat:networkmanager
- CVE-2016-0763 Improper Verification of Source of a Communication Channel in Apache Tomcat
- CVE-2016-0762 Observable Discrepancy in Apache Tomcat
- CVE-2016-0761 Path traversal in Cloud Foundry
- CVE-2016-0760 Code injection in apache:sentry
- CVE-2016-0758 Integer overflow in canonical:ubuntu linux
- CVE-2016-0757 OpenStack Image Service (Glance) vulnerable to Improper Access Control
- CVE-2016-0756 Security feature bypass in prosody:prosody
- CVE-2016-0755 Auth bypass in canonical:ubuntu linux
- CVE-2016-0754 Path traversal in haxx:curl
- CVE-2016-0753 activemodel contains Improper Input Validation
- CVE-2016-0752 Ruby on Rails Directory Traversal
- CVE-2016-0751 actionpack is vulnerable to denial of service via a crafted HTTP Accept header
- CVE-2016-0750 Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization
- CVE-2016-0749 Memory corruption in debian:debian linux
- CVE-2016-0747 Denial of service in apple:xcode
- CVE-2016-0746 Use after free in apple:xcode
- CVE-2016-0742 Null dereference in apple:xcode
- CVE-2016-0741 Denial of service in fedoraproject:389 directory server
- CVE-2016-0740 Pillow Buffer overflow in ImagingLibTiffDecode
- CVE-2016-0739 Weak cryptography in canonical:ubuntu linux
- CVE-2016-0738 OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
- CVE-2016-0737 OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
- CVE-2016-0736 Weak cryptography in Apache HTTP Server
- CVE-2016-0735 Apache Ranger Access Restriction Bypass
- CVE-2016-0734 Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
- CVE-2016-0733 The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password
- CVE-2016-0732 Privilege escalation in cloudfoundry:cf-release
- CVE-2016-0731 Path traversal in apache:ambari
- CVE-2016-0729 Memory corruption in fedoraproject:fedora
- CVE-2016-0728 Use after free in canonical:ubuntu linux
- CVE-2016-0727 Privilege escalation in canonical:ubuntu linux
- CVE-2016-0726 Hardcoded credentials in nagios:nagios
- CVE-2016-0725 Moodle Cross-site scripting (XSS) vulnerability in course management search
- CVE-2016-0724 Moodle sensitive information disclosure
- CVE-2016-0723 Race condition in linux:linux kernel
- CVE-2016-0721 Auth bypass in clusterlabs:pcs
- CVE-2016-0720 Cross-site request forgery in clusterlabs:pcs
- CVE-2016-0718 Memory corruption in apple:mac os x
- CVE-2016-0715 Information disclosure in Pivotal Cloud Foundry Elastic Runtime
- CVE-2016-0714 Improper Access Control in Apache Tomcat
- CVE-2016-0713 Cross-site scripting in cloudfoundry:cf-release
- CVE-2016-0712 Cross-site Scripting in Apache Jetspeed
- CVE-2016-0711 Apache Jetspeed vulnerable to Cross-site Scripting
- CVE-2016-0710 Apache Jetspeed vulnerable to SQL Injection
- CVE-2016-0709 Path Traversal in Apache Jetspeed
- CVE-2016-0708 Information disclosure in Cloud Foundry
- CVE-2016-0707 Misconfiguration in apache:ambari
- CVE-2016-0706 Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
- CVE-2016-0705 Memory corruption in canonical:ubuntu linux
- CVE-2016-0704 Weak cryptography in openssl:openssl
- CVE-2016-0703 Weak cryptography in openssl:openssl
- CVE-2016-0702 Information disclosure in canonical:ubuntu linux
- CVE-2016-0701 Weak cryptography in openssl:openssl
- CVE-2016-0700 Other in oracle:weblogic server
- CVE-2016-0699 Other in oracle:flexcube direct banking
- CVE-2016-0698 Other in oracle:peoplesoft enterprise peopletools
- CVE-2016-0697 Other in oracle:application object library
- CVE-2016-0696 Other in oracle:weblogic server
- CVE-2016-0695 Other in oracle:jdk
- CVE-2016-0694 Other in oracle:berkeley db
- CVE-2016-0693 Other in oracle:solaris
- CVE-2016-0692 Other in oracle:berkeley db
- CVE-2016-0691 Other in oracle:database
- CVE-2016-0690 Other in oracle:database
- CVE-2016-0689 Other in oracle:berkeley db
- CVE-2016-0688 Other in oracle:weblogic server
- CVE-2016-0687 Other in oracle:jdk
- CVE-2016-0686 Deserialization in oracle:jdk
- CVE-2016-0685 Other in oracle:peoplesoft enterprise peopletools
- CVE-2016-0684 Other in oracle:micros arspos
- CVE-2016-0683 Other in oracle:peoplesoft enterprise peopletools
- CVE-2016-0682 Other in oracle:berkeley db
- CVE-2016-0681 Other in oracle:olap
- CVE-2016-0680 Other in oracle:peoplesoft supply chain management eprocurement
- CVE-2016-0679 Other in oracle:peoplesoft enterprise peopletools
- CVE-2016-0678 Other in oracle:vm virtualbox
- CVE-2016-0677 Other in oracle:database
- CVE-2016-0676 Other in oracle:solaris
- CVE-2016-0675 Other in oracle:weblogic server
- CVE-2016-0674 Other in oracle:siebel core-common components
- CVE-2016-0673 Other in oracle:siebel ui framework
- CVE-2016-0672 Other in oracle:flexcube direct banking
- CVE-2016-0671 Other in oracle:http server
- CVE-2016-0669 Other in oracle:solaris