Skip to content
Noroxi

CWE-17 · 166 records

DEPRECATED: Code

CVEs in this class

166 records

  • CVE-2015-0240
    66This week

    The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x befor

    CriticalCVSS 10.0WeaponizedEPSS 88%

    samba · sambaFeb 23, 2015

  • CVE-2014-9222
    59Plan

    AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to ga

    CriticalCVSS 10.0WeaponizedEPSS 64%

    allegrosoft · rompagerDec 24, 2014

  • CVE-2015-3292
    44Plan

    The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) se

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    netapp · oncommand workflow automationMay 31, 2015

  • CVE-2015-4335
    43Plan

    Redis before 2.8.21 and 3.x before 3.0.2 allows remote attackers to execute arbitrary Lua bytecode via the eval command.

    CriticalCVSS 10.0No exploitEPSS 9%

    redislabs · redisJun 9, 2015

  • CVE-2015-3183
    42Plan

    The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remot

    MediumCVSS 5.0No exploitEPSS 73%

    apache · http serverJul 20, 2015

  • CVE-2015-4620
    42Plan

    name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DN

    HighCVSS 7.8No exploitEPSS 38%

    isc · bindJul 8, 2015

  • CVE-2015-1728
    42Plan

    Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · windows media playerJun 9, 2015

  • CVE-2015-2738
    41Plan

    The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x be

    CriticalCVSS 10.0No exploitEPSS 3%

    mozilla · firefoxJul 5, 2015

  • CVE-2015-2734
    41Plan

    The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x befo

    CriticalCVSS 10.0No exploitEPSS 3%

    mozilla · firefoxJul 5, 2015

  • CVE-2015-2737
    41Plan

    The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.

    CriticalCVSS 10.0No exploitEPSS 3%

    mozilla · firefoxJul 5, 2015

  • CVE-2015-5887
    41Plan

    The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a sess

    CriticalCVSS 10.0No exploitEPSS 2%

    apple · mac os xOct 9, 2015

  • CVE-2016-10481
    39Monitor

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, M

    CriticalCVSS 9.8No exploitEPSS 1%

    qualcomm · mdm9607 firmwareApr 18, 2018

  • CVE-2014-9707
    38Monitor

    EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a .

    HighCVSS 7.5WeaponizedEPSS 28%

    embedthis · goaheadMar 31, 2015

  • CVE-2015-2736
    38Monitor

    The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird

    CriticalCVSS 9.3No exploitEPSS 4%

    mozilla · firefoxJul 5, 2015

  • CVE-2015-2735
    38Monitor

    nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses uni

    CriticalCVSS 9.3No exploitEPSS 4%

    mozilla · firefoxJul 5, 2015

  • CVE-2016-10142
    35Monitor

    An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages.

    HighCVSS 8.6No exploitEPSS 3%

    ietf · ipv6Jan 14, 2017

  • CVE-2015-1465
    33Monitor

    The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period f

    HighCVSS 7.8No exploitEPSS 6%

    linux · linux kernelApr 5, 2015

  • CVE-2015-1157
    33Monitor

    CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Uni

    HighCVSS 7.8Proof of conceptEPSS 6%

    apple · iphone osMay 27, 2015

  • CVE-2015-1935
    33Monitor

    The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and W

    HighCVSS 8.0No exploitEPSS 4%

    ibm · db2Jul 19, 2015

  • CVE-2015-8027
    32Monitor

    Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, whic

    HighCVSS 7.5No exploitEPSS 5%

    nodejs · node.jsJan 2, 2016

  • CVE-2015-1233
    32Monitor

    Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote atta

    HighCVSS 7.5No exploitEPSS 5%

    google · chromeApr 1, 2015

  • CVE-2015-0847
    32Monitor

    nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a den

    HighCVSS 7.8No exploitEPSS 3%

    canonical · ubuntu linuxMay 29, 2015

  • CVE-2014-6386
    32Monitor

    Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47

    HighCVSS 7.8No exploitEPSS 3%

    juniper · junosJan 16, 2015

  • CVE-2015-1452
    32Monitor

    The Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5.0 Patch 7 build 4457 allows remote attackers to

    HighCVSS 7.8No exploitEPSS 2%

    fortinet · fortiosFeb 2, 2015

  • CVE-2015-2743
    31Monitor

    PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Worker

    HighCVSS 7.5No exploitEPSS 5%

    mozilla · firefoxJul 5, 2015

All vulnerability classes