CWE-388 · 37 records
7PK - Errors
CVEs in this class
37 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
66This week | CVE-2018-0155Weaponized | A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catacisco · ios · CWE-388 | High8.6 | KEV | 7.7% | Mar 28, 2018 |
65This week | CVE-2018-1002105Proof of concept | In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in thekubernetes · kubernetes · CWE-388 | Critical9.8 | — | 86.9% | Dec 5, 2018 |
40Plan | CVE-2014-9841No exploit | The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, reimagemagick · imagemagick · CWE-388 | Critical9.8 | — | 3.9% | Mar 20, 2017 |
40Plan | CVE-2014-9826No exploit | ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.imagemagick · imagemagick · CWE-388 | Critical9.8 | — | 3.7% | Mar 30, 2017 |
40Plan | CVE-2017-5401No exploit | A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error.debian · debian linux · CWE-388 | Critical9.8 | — | 3.0% | Jun 11, 2018 |
40Plan | CVE-2016-9967No exploit | Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7samsung · samsung mobile · CWE-388 | Critical9.8 | — | 1.9% | Dec 16, 2016 |
40Plan | CVE-2016-9966No exploit | Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7samsung · samsung mobile · CWE-388 | Critical9.8 | — | 1.9% | Dec 16, 2016 |
40Plan | CVE-2016-9965No exploit | Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7samsung · samsung mobile · CWE-388 | Critical9.8 | — | 1.9% | Dec 16, 2016 |
39Monitor | CVE-2016-10414No exploit | In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdqualcomm · mdm9206 firmware · CWE-388 | Critical9.8 | — | 1.2% | Apr 18, 2018 |
39Monitor | CVE-2014-9985No exploit | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition maqualcomm · mdm9635m firmware · CWE-388 | Critical9.8 | — | 1.1% | Apr 18, 2018 |
39Monitor | CVE-2016-10466No exploit | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDqualcomm · mdm9206 firmware · CWE-388 | Critical9.8 | — | 1.1% | Apr 18, 2018 |
39Monitor | CVE-2015-9120No exploit | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ40qualcomm · mdm9206 firmware · CWE-388 | Critical9.8 | — | 1.1% | Apr 18, 2018 |
35Monitor | CVE-2016-8745No exploit | A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.Rapache · tomcat · CWE-388 | High7.5 | — | 16.0% | Aug 10, 2017 |
34Monitor | CVE-2020-3509No exploit | Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerabilitycisco · ios xe · CWE-388 | High8.6 | — | 1.4% | Sep 24, 2020 |
34Monitor | CVE-2020-3510No exploit | Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerabilitycisco · ios xe · CWE-388 | High8.6 | — | 1.3% | Sep 24, 2020 |
34Monitor | CVE-2026-20263No exploit | Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerabilitycisco · ios xe · CWE-388 | High8.6 | — | 0.5% | Aug 5, 2026 |
31Monitor | CVE-2016-1480No exploit | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (Ecisco · email security appliance · CWE-388 | High7.5 | — | 2.4% | Oct 28, 2016 |
31Monitor | CVE-2016-6357No exploit | A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (EScisco · email security appliance · CWE-388 | High7.5 | — | 2.4% | Oct 28, 2016 |
31Monitor | CVE-2019-13046No exploit | linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.toaruos project · toaruos · CWE-388 | High7.8 | — | 0.5% | Jun 29, 2019 |
31Monitor | CVE-2017-8072No exploit | The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO elinux · linux kernel · CWE-388 | High7.8 | — | 0.4% | Apr 23, 2017 |
31Monitor | CVE-2017-17564No exploit | An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privilegesxen · xen · CWE-388 | High7.8 | — | 0.3% | Dec 12, 2017 |
30Monitor | CVE-2023-20227No exploit | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker tocisco · ios xe · CWE-388 | High7.5 | — | 0.8% | Sep 27, 2023 |
30Monitor | CVE-2016-7991No exploit | On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unssamsung · galaxy s4 · CWE-388 | High7.5 | — | 0.4% | Oct 31, 2016 |
29Monitor | CVE-2020-3512No exploit | Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerabilitycisco · ios xe · CWE-388 | High7.4 | — | 0.4% | Sep 24, 2020 |
27Monitor | CVE-2018-0415No exploit | A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Seriecisco · wap121 firmware · CWE-388 | Medium6.8 | — | 0.6% | Aug 15, 2018 |
- CVE-2018-015566This week
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Cata
HighCVSS 8.6KEVWeaponizedEPSS 7%cisco · iosMar 28, 2018
- CVE-2018-100210565This week
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the
CriticalCVSS 9.8Proof of conceptEPSS 86%kubernetes · kubernetesDec 5, 2018
- CVE-2014-984140Plan
The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, re
CriticalCVSS 9.8No exploitEPSS 3%imagemagick · imagemagickMar 20, 2017
- CVE-2014-982640Plan
ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.
CriticalCVSS 9.8No exploitEPSS 3%imagemagick · imagemagickMar 30, 2017
- CVE-2017-540140Plan
A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error.
CriticalCVSS 9.8No exploitEPSS 3%debian · debian linuxJun 11, 2018
- CVE-2016-996740Plan
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7
CriticalCVSS 9.8No exploitEPSS 1%samsung · samsung mobileDec 16, 2016
- CVE-2016-996640Plan
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7
CriticalCVSS 9.8No exploitEPSS 1%samsung · samsung mobileDec 16, 2016
- CVE-2016-996540Plan
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7
CriticalCVSS 9.8No exploitEPSS 1%samsung · samsung mobileDec 16, 2016
- CVE-2016-1041439Monitor
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapd
CriticalCVSS 9.8No exploitEPSS 1%qualcomm · mdm9206 firmwareApr 18, 2018
- CVE-2014-998539Monitor
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition ma
CriticalCVSS 9.8No exploitEPSS 1%qualcomm · mdm9635m firmwareApr 18, 2018
- CVE-2016-1046639Monitor
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MD
CriticalCVSS 9.8No exploitEPSS 1%qualcomm · mdm9206 firmwareApr 18, 2018
- CVE-2015-912039Monitor
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ40
CriticalCVSS 9.8No exploitEPSS 1%qualcomm · mdm9206 firmwareApr 18, 2018
- CVE-2016-874535Monitor
A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.R
HighCVSS 7.5No exploitEPSS 16%apache · tomcatAug 10, 2017
- CVE-2020-350934Monitor
Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 1%cisco · ios xeSep 24, 2020
- CVE-2020-351034Monitor
Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 1%cisco · ios xeSep 24, 2020
- CVE-2026-2026334Monitor
Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 0%cisco · ios xeAug 5, 2026
- CVE-2016-148031Monitor
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (E
HighCVSS 7.5No exploitEPSS 2%cisco · email security applianceOct 28, 2016
- CVE-2016-635731Monitor
A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ES
HighCVSS 7.5No exploitEPSS 2%cisco · email security applianceOct 28, 2016
- CVE-2019-1304631Monitor
linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.
HighCVSS 7.8No exploitEPSS 0%toaruos project · toaruosJun 29, 2019
- CVE-2017-807231Monitor
The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO e
HighCVSS 7.8No exploitEPSS 0%linux · linux kernelApr 23, 2017
- CVE-2017-1756431Monitor
An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges
HighCVSS 7.8No exploitEPSS 0%xen · xenDec 12, 2017
- CVE-2023-2022730Monitor
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to
HighCVSS 7.5No exploitEPSS 0%cisco · ios xeSep 27, 2023
- CVE-2016-799130Monitor
On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote uns
HighCVSS 7.5No exploitEPSS 0%samsung · galaxy s4Oct 31, 2016
- CVE-2020-351229Monitor
Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability
HighCVSS 7.4No exploitEPSS 0%cisco · ios xeSep 24, 2020
- CVE-2018-041527Monitor
A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Serie
MediumCVSS 6.8No exploitEPSS 0%cisco · wap121 firmwareAug 15, 2018