Skip to content
Noroxi

CWE-388 · 37 records

7PK - Errors

CVEs in this class

37 records

  • CVE-2018-0155
    66This week

    A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Cata

    HighCVSS 8.6KEVWeaponizedEPSS 7%

    cisco · iosMar 28, 2018

  • CVE-2018-1002105
    65This week

    In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the

    CriticalCVSS 9.8Proof of conceptEPSS 86%

    kubernetes · kubernetesDec 5, 2018

  • The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, re

    CriticalCVSS 9.8No exploitEPSS 3%

    imagemagick · imagemagickMar 20, 2017

  • ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.

    CriticalCVSS 9.8No exploitEPSS 3%

    imagemagick · imagemagickMar 30, 2017

  • A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error.

    CriticalCVSS 9.8No exploitEPSS 3%

    debian · debian linuxJun 11, 2018

  • Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7

    CriticalCVSS 9.8No exploitEPSS 1%

    samsung · samsung mobileDec 16, 2016

  • Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7

    CriticalCVSS 9.8No exploitEPSS 1%

    samsung · samsung mobileDec 16, 2016

  • Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7

    CriticalCVSS 9.8No exploitEPSS 1%

    samsung · samsung mobileDec 16, 2016

  • In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapd

    CriticalCVSS 9.8No exploitEPSS 1%

    qualcomm · mdm9206 firmwareApr 18, 2018

  • CVE-2014-9985
    39Monitor

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition ma

    CriticalCVSS 9.8No exploitEPSS 1%

    qualcomm · mdm9635m firmwareApr 18, 2018

  • In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MD

    CriticalCVSS 9.8No exploitEPSS 1%

    qualcomm · mdm9206 firmwareApr 18, 2018

  • CVE-2015-9120
    39Monitor

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ40

    CriticalCVSS 9.8No exploitEPSS 1%

    qualcomm · mdm9206 firmwareApr 18, 2018

  • CVE-2016-8745
    35Monitor

    A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.R

    HighCVSS 7.5No exploitEPSS 16%

    apache · tomcatAug 10, 2017

  • CVE-2020-3509
    34Monitor

    Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 1%

    cisco · ios xeSep 24, 2020

  • CVE-2020-3510
    34Monitor

    Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 1%

    cisco · ios xeSep 24, 2020

  • Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 0%

    cisco · ios xeAug 5, 2026

  • CVE-2016-1480
    31Monitor

    A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (E

    HighCVSS 7.5No exploitEPSS 2%

    cisco · email security applianceOct 28, 2016

  • CVE-2016-6357
    31Monitor

    A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ES

    HighCVSS 7.5No exploitEPSS 2%

    cisco · email security applianceOct 28, 2016

  • linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.

    HighCVSS 7.8No exploitEPSS 0%

    toaruos project · toaruosJun 29, 2019

  • CVE-2017-8072
    31Monitor

    The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO e

    HighCVSS 7.8No exploitEPSS 0%

    linux · linux kernelApr 23, 2017

  • An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges

    HighCVSS 7.8No exploitEPSS 0%

    xen · xenDec 12, 2017

  • A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to

    HighCVSS 7.5No exploitEPSS 0%

    cisco · ios xeSep 27, 2023

  • CVE-2016-7991
    30Monitor

    On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote uns

    HighCVSS 7.5No exploitEPSS 0%

    samsung · galaxy s4Oct 31, 2016

  • CVE-2020-3512
    29Monitor

    Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability

    HighCVSS 7.4No exploitEPSS 0%

    cisco · ios xeSep 24, 2020

  • CVE-2018-0415
    27Monitor

    A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Serie

    MediumCVSS 6.8No exploitEPSS 0%

    cisco · wap121 firmwareAug 15, 2018

All vulnerability classes