CWE-388 · 37 записей
7PK - Errors
CVE этого класса
37 записей
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
66На этой неделе | CVE-2018-0155Готовый эксплойт | A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catacisco · ios · CWE-388 | Высокая8,6 | KEV | 7,7 % | 28 мар. 2018 г. |
65На этой неделе | CVE-2018-1002105Proof of concept | In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in thekubernetes · kubernetes · CWE-388 | Критическая9,8 | — | 86,9 % | 5 дек. 2018 г. |
40В плане | CVE-2014-9841Эксплойта нет | The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, reimagemagick · imagemagick · CWE-388 | Критическая9,8 | — | 3,9 % | 20 мар. 2017 г. |
40В плане | CVE-2014-9826Эксплойта нет | ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.imagemagick · imagemagick · CWE-388 | Критическая9,8 | — | 3,7 % | 30 мар. 2017 г. |
40В плане | CVE-2017-5401Эксплойта нет | A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error.debian · debian linux · CWE-388 | Критическая9,8 | — | 3,0 % | 11 июн. 2018 г. |
40В плане | CVE-2016-9965Эксплойта нет | Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7samsung · samsung mobile · CWE-388 | Критическая9,8 | — | 1,9 % | 16 дек. 2016 г. |
40В плане | CVE-2016-9966Эксплойта нет | Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7samsung · samsung mobile · CWE-388 | Критическая9,8 | — | 1,9 % | 16 дек. 2016 г. |
40В плане | CVE-2016-9967Эксплойта нет | Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7samsung · samsung mobile · CWE-388 | Критическая9,8 | — | 1,9 % | 16 дек. 2016 г. |
39Наблюдать | CVE-2016-10414Эксплойта нет | In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdqualcomm · mdm9206 firmware · CWE-388 | Критическая9,8 | — | 1,2 % | 18 апр. 2018 г. |
39Наблюдать | CVE-2014-9985Эксплойта нет | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition maqualcomm · mdm9635m firmware · CWE-388 | Критическая9,8 | — | 1,1 % | 18 апр. 2018 г. |
39Наблюдать | CVE-2016-10466Эксплойта нет | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDqualcomm · mdm9206 firmware · CWE-388 | Критическая9,8 | — | 1,1 % | 18 апр. 2018 г. |
39Наблюдать | CVE-2015-9120Эксплойта нет | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ40qualcomm · mdm9206 firmware · CWE-388 | Критическая9,8 | — | 1,1 % | 18 апр. 2018 г. |
35Наблюдать | CVE-2016-8745Эксплойта нет | A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.Rapache · tomcat · CWE-388 | Высокая7,5 | — | 16,0 % | 10 авг. 2017 г. |
34Наблюдать | CVE-2020-3509Эксплойта нет | Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerabilitycisco · ios xe · CWE-388 | Высокая8,6 | — | 1,4 % | 24 сент. 2020 г. |
34Наблюдать | CVE-2020-3510Эксплойта нет | Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerabilitycisco · ios xe · CWE-388 | Высокая8,6 | — | 1,3 % | 24 сент. 2020 г. |
34Наблюдать | CVE-2026-20263Эксплойта нет | Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerabilitycisco · ios xe · CWE-388 | Высокая8,6 | — | 0,5 % | 5 авг. 2026 г. |
31Наблюдать | CVE-2016-1480Эксплойта нет | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (Ecisco · email security appliance · CWE-388 | Высокая7,5 | — | 2,4 % | 28 окт. 2016 г. |
31Наблюдать | CVE-2016-6357Эксплойта нет | A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (EScisco · email security appliance · CWE-388 | Высокая7,5 | — | 2,4 % | 28 окт. 2016 г. |
31Наблюдать | CVE-2019-13046Эксплойта нет | linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.toaruos project · toaruos · CWE-388 | Высокая7,8 | — | 0,5 % | 29 июн. 2019 г. |
31Наблюдать | CVE-2017-8072Эксплойта нет | The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO elinux · linux kernel · CWE-388 | Высокая7,8 | — | 0,4 % | 23 апр. 2017 г. |
31Наблюдать | CVE-2017-17564Эксплойта нет | An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privilegesxen · xen · CWE-388 | Высокая7,8 | — | 0,3 % | 12 дек. 2017 г. |
30Наблюдать | CVE-2023-20227Эксплойта нет | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker tocisco · ios xe · CWE-388 | Высокая7,5 | — | 0,8 % | 27 сент. 2023 г. |
30Наблюдать | CVE-2016-7991Эксплойта нет | On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unssamsung · galaxy s4 · CWE-388 | Высокая7,5 | — | 0,4 % | 31 окт. 2016 г. |
29Наблюдать | CVE-2020-3512Эксплойта нет | Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerabilitycisco · ios xe · CWE-388 | Высокая7,4 | — | 0,4 % | 24 сент. 2020 г. |
27Наблюдать | CVE-2018-0415Эксплойта нет | A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Seriecisco · wap121 firmware · CWE-388 | Средняя6,8 | — | 0,6 % | 15 авг. 2018 г. |
- CVE-2018-015566На этой неделе
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Cata
ВысокаяCVSS 8,6KEVГотовый эксплойтEPSS 7 %cisco · ios28 мар. 2018 г.
- CVE-2018-100210565На этой неделе
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the
КритическаяCVSS 9,8Proof of conceptEPSS 86 %kubernetes · kubernetes5 дек. 2018 г.
- CVE-2014-984140В плане
The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, re
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %imagemagick · imagemagick20 мар. 2017 г.
- CVE-2014-982640В плане
ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %imagemagick · imagemagick30 мар. 2017 г.
- CVE-2017-540140В плане
A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error.
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %debian · debian linux11 июн. 2018 г.
- CVE-2016-996540В плане
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %samsung · samsung mobile16 дек. 2016 г.
- CVE-2016-996640В плане
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %samsung · samsung mobile16 дек. 2016 г.
- CVE-2016-996740В плане
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %samsung · samsung mobile16 дек. 2016 г.
- CVE-2016-1041439Наблюдать
In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapd
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %qualcomm · mdm9206 firmware18 апр. 2018 г.
- CVE-2014-998539Наблюдать
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition ma
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %qualcomm · mdm9635m firmware18 апр. 2018 г.
- CVE-2016-1046639Наблюдать
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MD
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %qualcomm · mdm9206 firmware18 апр. 2018 г.
- CVE-2015-912039Наблюдать
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ40
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %qualcomm · mdm9206 firmware18 апр. 2018 г.
- CVE-2016-874535Наблюдать
A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.R
ВысокаяCVSS 7,5Эксплойта нетEPSS 16 %apache · tomcat10 авг. 2017 г.
- CVE-2020-350934Наблюдать
Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability
ВысокаяCVSS 8,6Эксплойта нетEPSS 1 %cisco · ios xe24 сент. 2020 г.
- CVE-2020-351034Наблюдать
Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability
ВысокаяCVSS 8,6Эксплойта нетEPSS 1 %cisco · ios xe24 сент. 2020 г.
- CVE-2026-2026334Наблюдать
Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
ВысокаяCVSS 8,6Эксплойта нетEPSS 0 %cisco · ios xe5 авг. 2026 г.
- CVE-2016-148031Наблюдать
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (E
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %cisco · email security appliance28 окт. 2016 г.
- CVE-2016-635731Наблюдать
A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ES
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %cisco · email security appliance28 окт. 2016 г.
- CVE-2019-1304631Наблюдать
linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %toaruos project · toaruos29 июн. 2019 г.
- CVE-2017-807231Наблюдать
The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO e
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %linux · linux kernel23 апр. 2017 г.
- CVE-2017-1756431Наблюдать
An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %xen · xen12 дек. 2017 г.
- CVE-2023-2022730Наблюдать
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %cisco · ios xe27 сент. 2023 г.
- CVE-2016-799130Наблюдать
On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote uns
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %samsung · galaxy s431 окт. 2016 г.
- CVE-2020-351229Наблюдать
Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability
ВысокаяCVSS 7,4Эксплойта нетEPSS 0 %cisco · ios xe24 сент. 2020 г.
- CVE-2018-041527Наблюдать
A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Serie
СредняяCVSS 6,8Эксплойта нетEPSS 0 %cisco · wap121 firmware15 авг. 2018 г.