# Vulnerabilities published in 2016


- [CVE-2016-8923](https://insights.sbomify.com/CVE-2016-8923/): Information disclosure in Curam Social Program Management (medium 4.3)
- [CVE-2016-8922](https://insights.sbomify.com/CVE-2016-8922/): Cross-site scripting in WebSphere Portal (medium 6.1)
- [CVE-2016-8921](https://insights.sbomify.com/CVE-2016-8921/): File upload in FileNet Content Manager (high 8.8)
- [CVE-2016-8920](https://insights.sbomify.com/CVE-2016-8920/): Cross-site scripting in Kenexa LMS on Cloud (medium 5.4)
- [CVE-2016-8919](https://insights.sbomify.com/CVE-2016-8919/): Deserialization in WebSphere Application Server (high 7.5)
- [CVE-2016-8918](https://insights.sbomify.com/CVE-2016-8918/): Auth bypass in Integration Bus (medium 5.9)
- [CVE-2016-8917](https://insights.sbomify.com/CVE-2016-8917/): Cross-site request forgery in Sterling Order Management (high 8.8)
- [CVE-2016-8916](https://insights.sbomify.com/CVE-2016-8916/): Information disclosure in n/a (medium 5.5)
- [CVE-2016-8915](https://insights.sbomify.com/CVE-2016-8915/): Denial of service in WebSphere MQ (medium 6.5)
- [CVE-2016-8913](https://insights.sbomify.com/CVE-2016-8913/): Path traversal in Kenexa LMS on Cloud (medium 6.5)
- [CVE-2016-8912](https://insights.sbomify.com/CVE-2016-8912/): Information disclosure in Kenexa LMS on Cloud (medium 4.3)
- [CVE-2016-8911](https://insights.sbomify.com/CVE-2016-8911/): Other in Kenexa LMS on Cloud (medium 5.4)
- [CVE-2016-8910](https://insights.sbomify.com/CVE-2016-8910/): Denial of service in n/a (medium 6.0)
- [CVE-2016-8909](https://insights.sbomify.com/CVE-2016-8909/): Denial of service in n/a (medium 6.0)
- [CVE-2016-8908](https://insights.sbomify.com/CVE-2016-8908/): SQL injection in n/a (high 8.8)
- [CVE-2016-8907](https://insights.sbomify.com/CVE-2016-8907/): SQL injection in n/a (high 8.8)
- [CVE-2016-8906](https://insights.sbomify.com/CVE-2016-8906/): SQL injection in n/a (high 8.8)
- [CVE-2016-8905](https://insights.sbomify.com/CVE-2016-8905/): SQL injection in n/a (high 8.8)
- [CVE-2016-8904](https://insights.sbomify.com/CVE-2016-8904/): SQL injection in n/a (high 8.8)
- [CVE-2016-8903](https://insights.sbomify.com/CVE-2016-8903/): SQL injection in n/a (high 8.8)
- [CVE-2016-8902](https://insights.sbomify.com/CVE-2016-8902/): SQL injection in n/a (critical 9.8)
- [CVE-2016-8901](https://insights.sbomify.com/CVE-2016-8901/): Deserialization in n/a (critical 9.8)
- [CVE-2016-8900](https://insights.sbomify.com/CVE-2016-8900/): Deserialization in n/a (critical 9.8)
- [CVE-2016-8899](https://insights.sbomify.com/CVE-2016-8899/): Deserialization in n/a (critical 9.8)
- [CVE-2016-8898](https://insights.sbomify.com/CVE-2016-8898/): SQL injection in n/a (critical 9.8)
- [CVE-2016-8897](https://insights.sbomify.com/CVE-2016-8897/): SQL injection in n/a (critical 9.8)
- [CVE-2016-8889](https://insights.sbomify.com/CVE-2016-8889/): Information disclosure in n/a (medium 6.2)
- [CVE-2016-8887](https://insights.sbomify.com/CVE-2016-8887/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8886](https://insights.sbomify.com/CVE-2016-8886/): Memory corruption in n/a (high 7.8)
- [CVE-2016-8885](https://insights.sbomify.com/CVE-2016-8885/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8884](https://insights.sbomify.com/CVE-2016-8884/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8883](https://insights.sbomify.com/CVE-2016-8883/): Denial of service in n/a (medium 5.5)
- [CVE-2016-8882](https://insights.sbomify.com/CVE-2016-8882/): Null dereference in n/a (medium 5.5)
- [CVE-2016-8879](https://insights.sbomify.com/CVE-2016-8879/): Memory corruption in n/a (medium 6.5)
- [CVE-2016-8878](https://insights.sbomify.com/CVE-2016-8878/): Memory corruption in n/a (high 8.8)
- [CVE-2016-8877](https://insights.sbomify.com/CVE-2016-8877/): Memory corruption in n/a (high 8.8)
- [CVE-2016-8876](https://insights.sbomify.com/CVE-2016-8876/): Memory corruption in n/a (high 7.5)
- [CVE-2016-8875](https://insights.sbomify.com/CVE-2016-8875/): Denial of service in n/a (medium 5.3)
- [CVE-2016-8871](https://insights.sbomify.com/CVE-2016-8871/): Information disclosure in n/a (medium 6.2)
- [CVE-2016-8870](https://insights.sbomify.com/CVE-2016-8870/): Missing authorization in n/a (high 8.1)
- [CVE-2016-8869](https://insights.sbomify.com/CVE-2016-8869/): Privilege escalation in n/a (critical 9.8)
- [CVE-2016-8867](https://insights.sbomify.com/CVE-2016-8867/): Privilege escalation in n/a (high 7.5)
- [CVE-2016-8866](https://insights.sbomify.com/CVE-2016-8866/): Memory corruption in n/a (high 8.8)
- [CVE-2016-8864](https://insights.sbomify.com/CVE-2016-8864/): Denial of service in n/a (high 7.5)
- [CVE-2016-8863](https://insights.sbomify.com/CVE-2016-8863/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-8862](https://insights.sbomify.com/CVE-2016-8862/): Memory corruption in n/a (high 8.8)
- [CVE-2016-8860](https://insights.sbomify.com/CVE-2016-8860/): Denial of service in n/a (high 7.5)
- [CVE-2016-8859](https://insights.sbomify.com/CVE-2016-8859/): Integer overflow in n/a (critical 9.8)
- [CVE-2016-8858](https://insights.sbomify.com/CVE-2016-8858/): Denial of service in n/a (high 7.5)
- [CVE-2016-8856](https://insights.sbomify.com/CVE-2016-8856/): Misconfiguration in n/a (high 7.8)
- [CVE-2016-8855](https://insights.sbomify.com/CVE-2016-8855/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2016-8827](https://insights.sbomify.com/CVE-2016-8827/): Path traversal in GeForce Experience (medium 6.5)
- [CVE-2016-8826](https://insights.sbomify.com/CVE-2016-8826/): Denial of service in Windows GPU Display Driver (medium 5.5)
- [CVE-2016-8825](https://insights.sbomify.com/CVE-2016-8825/): Integer overflow in Windows GPU Display Driver (high 7.8)
- [CVE-2016-8824](https://insights.sbomify.com/CVE-2016-8824/): Privilege escalation in Windows GPU Display Driver (high 7.8)
- [CVE-2016-8823](https://insights.sbomify.com/CVE-2016-8823/): Integer overflow in Windows GPU Display Driver (high 7.8)
- [CVE-2016-8822](https://insights.sbomify.com/CVE-2016-8822/): Other in Windows GPU Display Driver (high 7.8)
- [CVE-2016-8821](https://insights.sbomify.com/CVE-2016-8821/): Privilege escalation in Windows GPU Display Driver (high 7.8)
- [CVE-2016-8820](https://insights.sbomify.com/CVE-2016-8820/): Information disclosure in Quadro, NVS, GeForce, GRID and Tesla (medium 6.1)
- [CVE-2016-8819](https://insights.sbomify.com/CVE-2016-8819/): Information disclosure in Quadro, NVS, GeForce, GRID and Tesla (high 7.8)
- [CVE-2016-8818](https://insights.sbomify.com/CVE-2016-8818/): Null dereference in Quadro, NVS, GeForce, GRID and Tesla (high 7.8)
- [CVE-2016-8817](https://insights.sbomify.com/CVE-2016-8817/): Memory corruption in Quadro, NVS, GeForce, GRID and Tesla (high 7.8)
- [CVE-2016-8816](https://insights.sbomify.com/CVE-2016-8816/): Other in Quadro, NVS, GeForce, GRID and Tesla (high 7.8)
- [CVE-2016-8815](https://insights.sbomify.com/CVE-2016-8815/): Integer overflow in Quadro, NVS, GeForce, GRID and Tesla (high 7.8)
- [CVE-2016-8814](https://insights.sbomify.com/CVE-2016-8814/): Null dereference in Quadro, NVS, GeForce, GRID and Tesla (high 7.8)
- [CVE-2016-8813](https://insights.sbomify.com/CVE-2016-8813/): Null dereference in Quadro, NVS, GeForce, GRID and Tesla (high 7.8)
- [CVE-2016-8812](https://insights.sbomify.com/CVE-2016-8812/): Memory corruption in Quadro, NVS, and GeForce (all versions) (high 8.8)
- [CVE-2016-8811](https://insights.sbomify.com/CVE-2016-8811/): Integer overflow in Quadro, NVS, and GeForce (all versions) (high 7.8)
- [CVE-2016-8810](https://insights.sbomify.com/CVE-2016-8810/): Privilege escalation in Quadro, NVS, and GeForce (all versions) (high 7.8)
- [CVE-2016-8809](https://insights.sbomify.com/CVE-2016-8809/): Integer overflow in Quadro, NVS, and GeForce (all versions) (high 7.8)
- [CVE-2016-8808](https://insights.sbomify.com/CVE-2016-8808/): Privilege escalation in Quadro, NVS, and GeForce (all versions) (high 7.8)
- [CVE-2016-8807](https://insights.sbomify.com/CVE-2016-8807/): Memory corruption in Quadro, NVS, and GeForce (all versions) (high 7.8)
- [CVE-2016-8806](https://insights.sbomify.com/CVE-2016-8806/): Privilege escalation in Quadro, NVS, and GeForce (all versions) (high 7.8)
- [CVE-2016-8805](https://insights.sbomify.com/CVE-2016-8805/): Privilege escalation in Quadro, NVS, and GeForce (all versions) (high 7.8)
- [CVE-2016-8803](https://insights.sbomify.com/CVE-2016-8803/): Privilege escalation in FusionStorage V100R003C30U1 (high 7.5)
- [CVE-2016-8802](https://insights.sbomify.com/CVE-2016-8802/): Memory corruption in Secospace USG6300,Secospace USG6500,Secospace USG6600 Secospace USG6300 V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200,Secospace USG6500 V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200,Secospace USG6600 V500R001C20SPC100, V500R001C20SPC101, V500R001C20SPC200, (medium 6.5)
- [CVE-2016-8801](https://insights.sbomify.com/CVE-2016-8801/): Command injection in OceanStor 5600 V3 V300R003C00C10 and earlier versions (high 7.2)
- [CVE-2016-8798](https://insights.sbomify.com/CVE-2016-8798/): Security feature bypass in USG5500 V300R001C00 and V300R001C00 (high 7.5)
- [CVE-2016-8797](https://insights.sbomify.com/CVE-2016-8797/): Denial of service in AR3200,S12700,S5300,S5700,S6300,S6700,S7700,S9300,S9700 AR3200 V200R007C00, V200R005C32, V200R005C20,S12700 V200R008C00, V200R007C00,S5300 V200R008C00, V200R007C00, V200R006C00,S5700 V200R008C00, V200R007C00, V200R006C00,S6300 V200R008C00, V200R007C00,S6700 V200R008C00, V200R007C00,S7700 V200R008C00, V200R007C00, V200R006C00,S9300 V200R008C00, V200R007C00, V200R006C00,S9700 V200R008C00, V200R007C00, V200R006C00, (high 7.5)
- [CVE-2016-8796](https://insights.sbomify.com/CVE-2016-8796/): Denial of service in USG9520,USG9560,USG9580, USG9520 V300R001C01,USG9560 V300R001C01,USG9580 V300R001C01 (high 7.5)
- [CVE-2016-8795](https://insights.sbomify.com/CVE-2016-8795/): Integer overflow in CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, CloudEngine 8800,CloudEngine 12800, Secospace USG6600 CloudEngine 12800 V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, CloudEngine 6800 V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00, CloudEngine 8800 V100R006C00, Secospace USG6600 V500R001C00 (medium 5.9)
- [CVE-2016-8794](https://insights.sbomify.com/CVE-2016-8794/): Privilege escalation in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions before NXT-CL00C92B386,Versions before NXT-DL00C17B386,Versions before NXT-TL00C01B386,Versions before CRR-CL00C92B368,Versions before CRR-CL20C92B368,Versions before CRR-TL00C01B368,Versions before CRR-UL00C00B368,Versions before CRR-UL20C00B368,Versions before GRA-TL00C01B366,Versions before GRA-CL00C92B366,Versions before GRA-CL10C92B366,Versions before GRA-UL00C00B366,Versions before GRA-UL10C00B366 (high 7.1)
- [CVE-2016-8793](https://insights.sbomify.com/CVE-2016-8793/): Privilege escalation in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions before NXT-CL00C92B386,Versions before NXT-DL00C17B386,Versions before NXT-TL00C01B386,Versions before CRR-CL00C92B368,Versions before CRR-CL20C92B368,Versions before CRR-TL00C01B368,Versions before CRR-UL00C00B368,Versions before CRR-UL20C00B368,Versions before GRA-TL00C01B366,Versions before GRA-CL00C92B366,Versions before GRA-CL10C92B366,Versions before GRA-UL00C00B366,Versions before GRA-UL10C00B366 (medium 6.7)
- [CVE-2016-8792](https://insights.sbomify.com/CVE-2016-8792/): Privilege escalation in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions before NXT-CL00C92B386,Versions before NXT-DL00C17B386,Versions before NXT-TL00C01B386,Versions before CRR-CL00C92B368,Versions before CRR-CL20C92B368,Versions before CRR-TL00C01B368,Versions before CRR-UL00C00B368,Versions before CRR-UL20C00B368,Versions before GRA-TL00C01B366,Versions before GRA-CL00C92B366,Versions before GRA-CL10C92B366,Versions before GRA-UL00C00B366,Versions before GRA-UL10C00B366 (high 7.1)
- [CVE-2016-8791](https://insights.sbomify.com/CVE-2016-8791/): Privilege escalation in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions before NXT-CL00C92B386,Versions before NXT-DL00C17B386,Versions before NXT-TL00C01B386,Versions before CRR-CL00C92B368,Versions before CRR-CL20C92B368,Versions before CRR-TL00C01B368,Versions before CRR-UL00C00B368,Versions before CRR-UL20C00B368,Versions before GRA-TL00C01B366,Versions before GRA-CL00C92B366,Versions before GRA-CL10C92B366,Versions before GRA-UL00C00B366,Versions before GRA-UL10C00B366 (high 7.1)
- [CVE-2016-8790](https://insights.sbomify.com/CVE-2016-8790/): Memory corruption in CloudEngine 5800,CloudEngine 6800,CloudEngine 7800,CloudEngine 8800,CloudEngine 12800 V100R003C10,V100R005C00,V100R005C10,V100R006C00 (medium 5.7)
- [CVE-2016-8789](https://insights.sbomify.com/CVE-2016-8789/): Cross-site scripting in eSpace IAD V300R001C03, V300R001C04, V300R001C06, V300R001C20 and V300R001C07 (medium 6.1)
- [CVE-2016-8786](https://insights.sbomify.com/CVE-2016-8786/): Denial of service in S12700, S5700, S6700, S7700, S9700 (high 7.5)
- [CVE-2016-8785](https://insights.sbomify.com/CVE-2016-8785/): Information disclosure in S12700, S5700, S7700, S9700 (medium 4.3)
- [CVE-2016-8784](https://insights.sbomify.com/CVE-2016-8784/): Denial of service in CloudEngine 12800 (medium 4.3)
- [CVE-2016-8783](https://insights.sbomify.com/CVE-2016-8783/): Memory corruption in H60 (Honor 6), P9 Plus (high 7.8)
- [CVE-2016-8782](https://insights.sbomify.com/CVE-2016-8782/): Denial of service in CloudEngine 12800 (medium 5.3)
- [CVE-2016-8781](https://insights.sbomify.com/CVE-2016-8781/): Denial of service in Secospace USG6300, Secospace USG6500, Secospace USG6600 Secospace USG6300 V500R001C20 and V500R001C20SPC200PWE,Secospace USG6500 V500R001C20,Secospace USG6600 V500R001C20 and V500R001C20SPC200PWE (medium 6.5)
- [CVE-2016-8780](https://insights.sbomify.com/CVE-2016-8780/): Denial of service in CloudEngine 6800, CloudEngine 7800, CloudEngine 8800, CloudEngine 12800 CloudEngine 6800 V100R006C00,CloudEngine 7800 V100R006C00,CloudEngine 8800 V100R006C00,CloudEngine 12800 V100R006C00, (medium 6.5)
- [CVE-2016-8779](https://insights.sbomify.com/CVE-2016-8779/): Other in FusionAccess FusionAccess V100R005C10, FusionAccess V100R005C20 (medium 6.5)
- [CVE-2016-8776](https://insights.sbomify.com/CVE-2016-8776/): Auth bypass in P9, P9 Lite EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00,VNS-L21C185, (medium 4.6)
- [CVE-2016-8775](https://insights.sbomify.com/CVE-2016-8775/): Memory corruption in NEM Versions before NEM-AL10C00B130,Versions before NEM-UL10C17B160,Versions before NEM-UL10C00B160,Versions before NEM-TL00C01B160, (medium 6.7)
- [CVE-2016-8774](https://insights.sbomify.com/CVE-2016-8774/): Memory corruption in Mate 8,Mate S,P8,P9 Versions before NXT-AL10C00B386,Versions before NXT-CL00C92B386,Versions before NXT-DL00C17B386,Versions before NXT-TL00C01B386,Versions before CRR-CL00C92B368,Versions before CRR-CL20C92B368,Versions before CRR-TL00C01B368,Versions before CRR-UL00C00B368,Versions before CRR-UL20C00B368,Versions before GRA-TL00C01B366,Versions before GRA-CL00C92B366,Versions before GRA-CL10C92B366,Versions before GRA-UL00C00B366,Versions before GRA-UL10C00B366,Versions before EVA-AL10C00B190,Versions before EVA-DL10C00B190,Versions before EVA-TL10C00B190,Versions before EVA-CL10C00B190, (medium 6.7)
- [CVE-2016-8773](https://insights.sbomify.com/CVE-2016-8773/): Denial of service in S5300,S5700,S6300,S6700,S7700,9300,9700,S12700 S5300 with software V200R003C00, V200R007C00, V200R008C00, V200R009C00,S5700 with software V200R001C00, V200R002C00, V200R003C00, V200R005C00, V200R005C03, V200R007C00, V200R008C00, V200R009C00,S6300 with software V200R003C00, V200R005C00, V200R008C00, V200R009C00,S6700 with software V200R001C00, V200R001C01, V200R002C00, V200R003C00, V200R005C00, V200R008C00, V200R009C00,S7700 with software V200R007C00, V200R008C00, V200R009C00,S9300 with software V200R007C00, V200R008C00, V200R009C00,S9700 with software V200R007C00, V200R008C00, V200R009C00 and S12700 with software V200R007C00, V200R007C01, V200R008C00, V200R009C00 (high 7.5)
- [CVE-2016-8769](https://insights.sbomify.com/CVE-2016-8769/): Privilege escalation in Huawei UTPS (medium 6.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2016/page/9/