# Vulnerabilities published in 2016


- [CVE-2016-0780](https://insights.sbomify.com/CVE-2016-0780/): Denial of service in Cloud Foundry (high 7.5)
- [CVE-2016-0779](https://insights.sbomify.com/CVE-2016-0779/): Deserialization in apache:tomee (critical 9.8)
- [CVE-2016-0778](https://insights.sbomify.com/CVE-2016-0778/): Memory corruption in apple:mac os x (high 8.1)
- [CVE-2016-0777](https://insights.sbomify.com/CVE-2016-0777/): Information disclosure in apple:mac os x (medium 6.5)
- [CVE-2016-0775](https://insights.sbomify.com/CVE-2016-0775/): Pillow Buffer overflow in ImagingFliDecode (medium 6.5)
- [CVE-2016-0774](https://insights.sbomify.com/CVE-2016-0774/): Memory corruption in google:android (medium 6.8)
- [CVE-2016-0773](https://insights.sbomify.com/CVE-2016-0773/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2016-0772](https://insights.sbomify.com/CVE-2016-0772/): Security feature bypass in python:python (medium 6.5)
- [CVE-2016-0771](https://insights.sbomify.com/CVE-2016-0771/): Memory corruption in samba:samba (medium 5.9)
- [CVE-2016-0770](https://insights.sbomify.com/CVE-2016-0770/): Cross-site scripting in zahmit design:connections business directory plugin (medium 6.1)
- [CVE-2016-0769](https://insights.sbomify.com/CVE-2016-0769/): SQL injection in elfden:eshop plugin (high 8.8)
- [CVE-2016-0768](https://insights.sbomify.com/CVE-2016-0768/): Missing authorization in postgresql:postgresql (high 7.5)
- [CVE-2016-0767](https://insights.sbomify.com/CVE-2016-0767/): PostgreSQL PL/Java Improper Privilege Management (medium 6.5)
- [CVE-2016-0766](https://insights.sbomify.com/CVE-2016-0766/): Privilege escalation in canonical:ubuntu linux (high 8.8)
- [CVE-2016-0765](https://insights.sbomify.com/CVE-2016-0765/): Cross-site scripting in elfden:eshop plugin (medium 6.1)
- [CVE-2016-0764](https://insights.sbomify.com/CVE-2016-0764/): Race condition in redhat:networkmanager (medium 6.2)
- [CVE-2016-0763](https://insights.sbomify.com/CVE-2016-0763/): Improper Verification of Source of a Communication Channel in Apache Tomcat (medium 6.3)
- [CVE-2016-0762](https://insights.sbomify.com/CVE-2016-0762/): Observable Discrepancy in Apache Tomcat (medium 5.9)
- [CVE-2016-0761](https://insights.sbomify.com/CVE-2016-0761/): Path traversal in Cloud Foundry (critical 9.8)
- [CVE-2016-0760](https://insights.sbomify.com/CVE-2016-0760/): Code injection in apache:sentry (high 8.8)
- [CVE-2016-0758](https://insights.sbomify.com/CVE-2016-0758/): Integer overflow in canonical:ubuntu linux (high 7.8)
- [CVE-2016-0757](https://insights.sbomify.com/CVE-2016-0757/): OpenStack Image Service (Glance) vulnerable to Improper Access Control (medium 4.3)
- [CVE-2016-0756](https://insights.sbomify.com/CVE-2016-0756/): Security feature bypass in prosody:prosody (medium 5.3)
- [CVE-2016-0755](https://insights.sbomify.com/CVE-2016-0755/): Auth bypass in canonical:ubuntu linux (high 7.3)
- [CVE-2016-0754](https://insights.sbomify.com/CVE-2016-0754/): Path traversal in haxx:curl (medium 5.3)
- [CVE-2016-0753](https://insights.sbomify.com/CVE-2016-0753/): activemodel contains Improper Input Validation (medium 5.3)
- [CVE-2016-0752](https://insights.sbomify.com/CVE-2016-0752/): Ruby on Rails Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2016-0751](https://insights.sbomify.com/CVE-2016-0751/): actionpack is vulnerable to denial of service via a crafted HTTP Accept header (high 7.5)
- [CVE-2016-0750](https://insights.sbomify.com/CVE-2016-0750/): Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization (medium 4.2)
- [CVE-2016-0749](https://insights.sbomify.com/CVE-2016-0749/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2016-0747](https://insights.sbomify.com/CVE-2016-0747/): Denial of service in apple:xcode (medium 5.3)
- [CVE-2016-0746](https://insights.sbomify.com/CVE-2016-0746/): Use after free in apple:xcode (critical 9.8)
- [CVE-2016-0742](https://insights.sbomify.com/CVE-2016-0742/): Null dereference in apple:xcode (high 7.5)
- [CVE-2016-0741](https://insights.sbomify.com/CVE-2016-0741/): Denial of service in fedoraproject:389 directory server (high 7.5)
- [CVE-2016-0740](https://insights.sbomify.com/CVE-2016-0740/): Pillow Buffer overflow in ImagingLibTiffDecode (medium 6.5)
- [CVE-2016-0739](https://insights.sbomify.com/CVE-2016-0739/): Weak cryptography in canonical:ubuntu linux (medium 5.9)
- [CVE-2016-0738](https://insights.sbomify.com/CVE-2016-0738/): OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service (high 7.5)
- [CVE-2016-0737](https://insights.sbomify.com/CVE-2016-0737/): OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service (high 7.5)
- [CVE-2016-0736](https://insights.sbomify.com/CVE-2016-0736/): Weak cryptography in Apache HTTP Server (high 7.5)
- [CVE-2016-0735](https://insights.sbomify.com/CVE-2016-0735/): Apache Ranger Access Restriction Bypass (high 8.8)
- [CVE-2016-0734](https://insights.sbomify.com/CVE-2016-0734/): Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ (medium 6.1)
- [CVE-2016-0733](https://insights.sbomify.com/CVE-2016-0733/): The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password (critical 9.8)
- [CVE-2016-0732](https://insights.sbomify.com/CVE-2016-0732/): Privilege escalation in cloudfoundry:cf-release (high 8.8)
- [CVE-2016-0731](https://insights.sbomify.com/CVE-2016-0731/): Path traversal in apache:ambari (medium 4.9)
- [CVE-2016-0729](https://insights.sbomify.com/CVE-2016-0729/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2016-0728](https://insights.sbomify.com/CVE-2016-0728/): Use after free in canonical:ubuntu linux (high 7.8)
- [CVE-2016-0727](https://insights.sbomify.com/CVE-2016-0727/): Privilege escalation in canonical:ubuntu linux (high 7.8)
- [CVE-2016-0726](https://insights.sbomify.com/CVE-2016-0726/): Hardcoded credentials in nagios:nagios (critical 9.8)
- [CVE-2016-0725](https://insights.sbomify.com/CVE-2016-0725/): Moodle Cross-site scripting (XSS) vulnerability in course management search (medium 6.1)
- [CVE-2016-0724](https://insights.sbomify.com/CVE-2016-0724/): Moodle sensitive information disclosure (medium 4.3)
- [CVE-2016-0723](https://insights.sbomify.com/CVE-2016-0723/): Race condition in linux:linux kernel (medium 6.8)
- [CVE-2016-0721](https://insights.sbomify.com/CVE-2016-0721/): Auth bypass in clusterlabs:pcs (high 8.1)
- [CVE-2016-0720](https://insights.sbomify.com/CVE-2016-0720/): Cross-site request forgery in clusterlabs:pcs (high 8.8)
- [CVE-2016-0718](https://insights.sbomify.com/CVE-2016-0718/): Memory corruption in apple:mac os x (critical 9.8)
- [CVE-2016-0715](https://insights.sbomify.com/CVE-2016-0715/): Information disclosure in Pivotal Cloud Foundry Elastic Runtime (medium 5.9)
- [CVE-2016-0714](https://insights.sbomify.com/CVE-2016-0714/): Improper Access Control in Apache Tomcat (high 8.8)
- [CVE-2016-0713](https://insights.sbomify.com/CVE-2016-0713/): Cross-site scripting in cloudfoundry:cf-release (medium 4.7)
- [CVE-2016-0712](https://insights.sbomify.com/CVE-2016-0712/): Cross-site Scripting in Apache Jetspeed (medium 6.1)
- [CVE-2016-0711](https://insights.sbomify.com/CVE-2016-0711/): Apache Jetspeed vulnerable to Cross-site Scripting (medium 6.1)
- [CVE-2016-0710](https://insights.sbomify.com/CVE-2016-0710/): Apache Jetspeed vulnerable to SQL Injection (high 8.8)
- [CVE-2016-0709](https://insights.sbomify.com/CVE-2016-0709/): Path Traversal in Apache Jetspeed (high 7.2)
- [CVE-2016-0708](https://insights.sbomify.com/CVE-2016-0708/): Information disclosure in Cloud Foundry (medium 5.9)
- [CVE-2016-0707](https://insights.sbomify.com/CVE-2016-0707/): Misconfiguration in apache:ambari (low 3.3)
- [CVE-2016-0706](https://insights.sbomify.com/CVE-2016-0706/): Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat (medium 4.3)
- [CVE-2016-0705](https://insights.sbomify.com/CVE-2016-0705/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2016-0704](https://insights.sbomify.com/CVE-2016-0704/): Weak cryptography in openssl:openssl (medium 5.9)
- [CVE-2016-0703](https://insights.sbomify.com/CVE-2016-0703/): Weak cryptography in openssl:openssl (medium 5.9)
- [CVE-2016-0702](https://insights.sbomify.com/CVE-2016-0702/): Information disclosure in canonical:ubuntu linux (medium 5.1)
- [CVE-2016-0701](https://insights.sbomify.com/CVE-2016-0701/): Weak cryptography in openssl:openssl (low 3.7)
- [CVE-2016-0700](https://insights.sbomify.com/CVE-2016-0700/): Other in oracle:weblogic server (medium 6.1)
- [CVE-2016-0699](https://insights.sbomify.com/CVE-2016-0699/): Other in oracle:flexcube direct banking (critical 9.1)
- [CVE-2016-0698](https://insights.sbomify.com/CVE-2016-0698/): Other in oracle:peoplesoft enterprise peopletools (medium 5.4)
- [CVE-2016-0697](https://insights.sbomify.com/CVE-2016-0697/): Other in oracle:application object library (medium 6.0)
- [CVE-2016-0696](https://insights.sbomify.com/CVE-2016-0696/): Other in oracle:weblogic server (medium 5.4)
- [CVE-2016-0695](https://insights.sbomify.com/CVE-2016-0695/): Other in oracle:jdk (medium 5.9)
- [CVE-2016-0694](https://insights.sbomify.com/CVE-2016-0694/): Other in oracle:berkeley db (high 7.8)
- [CVE-2016-0693](https://insights.sbomify.com/CVE-2016-0693/): Other in oracle:solaris (critical 9.8)
- [CVE-2016-0692](https://insights.sbomify.com/CVE-2016-0692/): Other in oracle:berkeley db (high 7.8)
- [CVE-2016-0691](https://insights.sbomify.com/CVE-2016-0691/): Other in oracle:database (low 3.3)
- [CVE-2016-0690](https://insights.sbomify.com/CVE-2016-0690/): Other in oracle:database (low 3.3)
- [CVE-2016-0689](https://insights.sbomify.com/CVE-2016-0689/): Other in oracle:berkeley db (high 7.8)
- [CVE-2016-0688](https://insights.sbomify.com/CVE-2016-0688/): Other in oracle:weblogic server (low 3.7)
- [CVE-2016-0687](https://insights.sbomify.com/CVE-2016-0687/): Other in oracle:jdk (critical 9.6)
- [CVE-2016-0686](https://insights.sbomify.com/CVE-2016-0686/): Deserialization in oracle:jdk (critical 9.6)
- [CVE-2016-0685](https://insights.sbomify.com/CVE-2016-0685/): Other in oracle:peoplesoft enterprise peopletools (medium 5.4)
- [CVE-2016-0684](https://insights.sbomify.com/CVE-2016-0684/): Other in oracle:micros arspos (medium 6.5)
- [CVE-2016-0683](https://insights.sbomify.com/CVE-2016-0683/): Other in oracle:peoplesoft enterprise peopletools (medium 5.4)
- [CVE-2016-0682](https://insights.sbomify.com/CVE-2016-0682/): Other in oracle:berkeley db (high 7.8)
- [CVE-2016-0681](https://insights.sbomify.com/CVE-2016-0681/): Other in oracle:olap (high 7.8)
- [CVE-2016-0680](https://insights.sbomify.com/CVE-2016-0680/): Other in oracle:peoplesoft supply chain management eprocurement (medium 5.4)
- [CVE-2016-0679](https://insights.sbomify.com/CVE-2016-0679/): Other in oracle:peoplesoft enterprise peopletools (high 8.7)
- [CVE-2016-0678](https://insights.sbomify.com/CVE-2016-0678/): Other in oracle:vm virtualbox (medium 6.7)
- [CVE-2016-0677](https://insights.sbomify.com/CVE-2016-0677/): Other in oracle:database (medium 5.9)
- [CVE-2016-0676](https://insights.sbomify.com/CVE-2016-0676/): Other in oracle:solaris (medium 4.7)
- [CVE-2016-0675](https://insights.sbomify.com/CVE-2016-0675/): Other in oracle:weblogic server (medium 6.1)
- [CVE-2016-0674](https://insights.sbomify.com/CVE-2016-0674/): Other in oracle:siebel core-common components (medium 4.4)
- [CVE-2016-0673](https://insights.sbomify.com/CVE-2016-0673/): Other in oracle:siebel ui framework (medium 5.4)
- [CVE-2016-0672](https://insights.sbomify.com/CVE-2016-0672/): Other in oracle:flexcube direct banking (medium 6.1)
- [CVE-2016-0671](https://insights.sbomify.com/CVE-2016-0671/): Other in oracle:http server (low 3.7)
- [CVE-2016-0669](https://insights.sbomify.com/CVE-2016-0669/): Other in oracle:solaris (medium 6.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/88/