Menu

Star on GitHub · 3.2k

2016

6,447 vulnerabilities published in 2016.

Results

6,447· Page 27/129
8.8
CVE-2016-4286

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637

8.8
CVE-2016-4273

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637

9.8
CVE-2016-1091

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15

9.8
CVE-2016-1089

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15

5.5
CVE-2016-7796

The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a z

5.5
CVE-2016-7795

The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (a

3.3
CVE-2016-7437

SAP Netweaver 7.40 improperly logs (1) DUI and (2) DUJ events in the SAP Security Audit Log as non-critical, which might

8.8
CVE-2016-7065

The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to caus

7.8
CVE-2016-6325

The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permi

7.8
CVE-2016-5425

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distribu

6.5
CVE-2016-4407

The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures, which allows remote au

7.8
CVE-2016-3946

SAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by reading the Windows reg

5.5
CVE-2016-3638

SAP SLD Registration Program (aka SLDREG) allows local users to cause a denial of service (memory corruption and process

7.5
CVE-2016-3635

SAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity (UCON) access control lis

9.1
CVE-2016-8565

Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write to files, rename files, create

6.5
CVE-2016-8564

SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers

7.5
CVE-2016-8563

Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service (A

2.5
CVE-2016-7960

Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version upda

4.7
CVE-2016-7959

Siemens SIMATIC STEP 7 (TIA Portal) before 14 improperly stores pre-shared key data in TIA project files, which makes it

8.8
CVE-2016-1000216

Ruckus Wireless H500 web management interface authenticated command injection

6.1
CVE-2016-1000155

Reflected XSS in wordpress plugin wpsolr-search-engine v7.6

6.1
CVE-2016-1000154

Reflected XSS in wordpress plugin whizz v1.0.7

6.1
CVE-2016-1000153

Reflected XSS in wordpress plugin tidio-gallery v1.1

6.1
CVE-2016-1000152

Reflected XSS in wordpress plugin tidio-form v1.0

6.1
CVE-2016-1000151

Reflected XSS in wordpress plugin tera-charts v1.0

6.1
CVE-2016-1000150

Reflected XSS in wordpress plugin simplified-content v1.0.0

6.1
CVE-2016-1000149

Reflected XSS in wordpress plugin simpel-reserveren v3.5.2

6.1
CVE-2016-1000148

Reflected XSS in wordpress plugin s3-video v0.983

6.1
CVE-2016-1000147

Reflected XSS in wordpress plugin recipes-writer v1.0.4

6.1
CVE-2016-1000146

Reflected XSS in wordpress plugin pondol-formmail v1.1

6.1
CVE-2016-1000145

Reflected XSS in wordpress plugin pondol-carousel v1.0

6.1
CVE-2016-1000144

Reflected XSS in wordpress plugin photoxhibit v2.1.8

6.1
CVE-2016-1000143

Reflected XSS in wordpress plugin photoxhibit v2.1.8

6.1
CVE-2016-1000142

Reflected XSS in wordpress plugin parsi-font v4.2.5

6.1
CVE-2016-1000141

Reflected XSS in wordpress plugin page-layout-builder v1.9.3

6.1
CVE-2016-1000140

Reflected XSS in wordpress plugin new-year-firework v1.1.9

6.1
CVE-2016-1000139

Reflected XSS in wordpress plugin infusionsoft v1.5.11

6.1
CVE-2016-1000138

Reflected XSS in wordpress plugin indexisto v1.0.5

6.1
CVE-2016-1000137

Reflected XSS in wordpress plugin hero-maps-pro v2.1.0

6.1
CVE-2016-1000136

Reflected XSS in wordpress plugin heat-trackr v1.0

6.1
CVE-2016-1000135

Reflected XSS in wordpress plugin hdw-tube v1.2

6.1
CVE-2016-1000134

Reflected XSS in wordpress plugin hdw-tube v1.2

6.1
CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1

6.1
CVE-2016-1000132

Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8

6.1
CVE-2016-1000131

Reflected XSS in wordpress plugin e-search v1.0

6.1
CVE-2016-1000130

Reflected XSS in wordpress plugin e-search v1.0

6.1
CVE-2016-1000129

Reflected XSS in wordpress plugin defa-online-image-protector v3.3

6.1
CVE-2016-1000128

Reflected XSS in wordpress plugin anti-plagiarism v3.60

6.1
CVE-2016-1000127

Reflected XSS in wordpress plugin ajax-random-post v2.00

6.1
CVE-2016-1000126

Reflected XSS in wordpress plugin admin-font-editor v1.8

Test your stack for 2016issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.