CWE-170 · 42 kayıt
Improper Null Termination
Bu sınıftaki CVE’ler
42 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
46Planlayın | CVE-2021-22931İstismar yok | Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validationnodejs · node.js · CWE-170 | Kritik9,8 | — | %22,0 | 16 Ağu 2021 |
40Planlayın | CVE-2019-8275İstismar yok | UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being acuvnc · ultravnc · CWE-170 | Kritik9,8 | — | %4,0 | 8 Mar 2019 |
40Planlayın | CVE-2021-31886İstismar yok | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (siemens · nucleus net · CWE-170 | Kritik9,8 | — | %3,0 | 9 Kas 2021 |
39İzleyin | CVE-2021-31884İstismar yok | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (siemens · capital vstar · CWE-170 | Kritik9,8 | — | %1,5 | 9 Kas 2021 |
39İzleyin | CVE-2021-1411İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-170 | Kritik9,9 | — | %1,4 | 24 Mar 2021 |
39İzleyin | CVE-2026-42010İstismar yok | Gnutls: gnutls: authentication bypass via nul character in usernamegnu · gnutls · CWE-170 | Kritik9,8 | — | %0,9 | 7 May 2026 |
39İzleyin | CVE-2026-5067İstismar yok | Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Keyzephyrproject · zephyr · CWE-170 | Kritik9,8 | — | %0,9 | 9 Haz 2026 |
39İzleyin | CVE-2026-8721İstismar yok | Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLsjonasbn · crypt::openssl::pkcs12 · CWE-170 | Kritik9,8 | — | %0,6 | 17 May 2026 |
36İzleyin | CVE-2021-31888İstismar yok | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (siemens · nucleus net · CWE-170 | Yüksek8,8 | — | %2,4 | 9 Kas 2021 |
36İzleyin | CVE-2021-31887İstismar yok | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (siemens · nucleus net · CWE-170 | Yüksek8,8 | — | %2,4 | 9 Kas 2021 |
33İzleyin | CVE-2024-45288İstismar yok | Multiple vulnerabilities in libnvfreebsd · freebsd · CWE-170 | Yüksek8,4 | — | %0,3 | 5 Eyl 2024 |
32İzleyin | CVE-2019-11044İstismar yok | link() silently truncates after a null byte on Windowsphp · php · CWE-170 | Yüksek7,5 | — | %5,1 | 22 Ara 2019 |
31İzleyin | CVE-2023-36906İstismar yok | Windows Cryptographic Services Information Disclosure Vulnerabilitymicrosoft · windows 10 · CWE-170 | Yüksek7,5 | — | %2,0 | 8 Ağu 2023 |
31İzleyin | CVE-2023-36907İstismar yok | Windows Cryptographic Services Information Disclosure Vulnerabilitymicrosoft · windows 10 · CWE-170 | Yüksek7,5 | — | %1,7 | 8 Ağu 2023 |
31İzleyin | CVE-2024-21442İstismar yok | Windows USB Print Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 21h2 · CWE-170 | Yüksek7,8 | — | %0,8 | 12 Mar 2024 |
30İzleyin | CVE-2024-43474İstismar yok | Microsoft SQL Server Information Disclosure Vulnerabilitymicrosoft · sql server 2017 · CWE-170 | Yüksek7,5 | — | %1,3 | 10 Eyl 2024 |
30İzleyin | CVE-2022-47515İstismar yok | An issue was discovered in drachtio-server before 0.8.20.drachtio · drachtio-server · CWE-170 | Yüksek7,5 | — | %1,2 | 18 Ara 2022 |
30İzleyin | CVE-2026-70587İstismar yok | Windows Remote Desktop Protocol Information Disclosure Vulnerabilitymicrosoft · windows 10 1607 · CWE-170 | Yüksek7,5 | — | %1,0 | 8 Eyl 2026 |
30İzleyin | CVE-2023-24021İstismar yok | Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer overtrustwave · modsecurity · CWE-170 | Yüksek7,5 | — | %0,9 | 20 Oca 2023 |
30İzleyin | CVE-2024-31197İstismar yok | Improper Null Termination in libfluid_msg libraryopennetworking · libfluid msg · CWE-170 | Yüksek7,5 | — | %0,3 | 18 Eyl 2024 |
30İzleyin | CVE-2025-67790İstismar yok | An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.drivelock · drivelock · CWE-170 | Yüksek7,5 | — | %0,3 | 17 Ara 2025 |
29İzleyin | CVE-2024-31484İstismar yok | A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communicatisiemens · cpc80 central processing/communication · CWE-170 | Yüksek7,3 | — | %0,5 | 14 May 2024 |
28İzleyin | CVE-2021-1469İstismar yok | Cisco Jabber Desktop and Mobile Client Software Vulnerabilitiescisco · jabber · CWE-170 | Yüksek7,2 | — | %1,0 | 24 Mar 2021 |
28İzleyin | CVE-2025-2026Kavram kanıtı | The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attackers to execute a nullmoxa · nport 6100-g2/6200-g2 series · CWE-170 | Yüksek7,1 | — | %0,4 | 31 Ara 2025 |
28İzleyin | CVE-2021-1120İstismar yok | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a string provided by the guest OS may not be pnvidia · virtual gpu · CWE-170 | Yüksek7,0 | — | %0,2 | 29 Eki 2021 |
- CVE-2021-2293146Planlayın
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation
KritikCVSS 9,8İstismar yokEPSS %22nodejs · node.js16 Ağu 2021
- CVE-2019-827540Planlayın
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being ac
KritikCVSS 9,8İstismar yokEPSS %4uvnc · ultravnc8 Mar 2019
- CVE-2021-3188640Planlayın
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (
KritikCVSS 9,8İstismar yokEPSS %3siemens · nucleus net9 Kas 2021
- CVE-2021-3188439İzleyin
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (
KritikCVSS 9,8İstismar yokEPSS %1siemens · capital vstar9 Kas 2021
- CVE-2021-141139İzleyin
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
KritikCVSS 9,9İstismar yokEPSS %1cisco · jabber24 Mar 2021
- CVE-2026-4201039İzleyin
Gnutls: gnutls: authentication bypass via nul character in username
KritikCVSS 9,8İstismar yokEPSS %1gnu · gnutls7 May 2026
- CVE-2026-506739İzleyin
Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key
KritikCVSS 9,8İstismar yokEPSS %1zephyrproject · zephyr9 Haz 2026
- CVE-2026-872139İzleyin
Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs
KritikCVSS 9,8İstismar yokEPSS %1jonasbn · crypt::openssl::pkcs1217 May 2026
- CVE-2021-3188836İzleyin
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (
YüksekCVSS 8,8İstismar yokEPSS %2siemens · nucleus net9 Kas 2021
- CVE-2021-3188736İzleyin
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (
YüksekCVSS 8,8İstismar yokEPSS %2siemens · nucleus net9 Kas 2021
- CVE-2024-4528833İzleyin
Multiple vulnerabilities in libnv
YüksekCVSS 8,4İstismar yokEPSS %0freebsd · freebsd5 Eyl 2024
- CVE-2019-1104432İzleyin
link() silently truncates after a null byte on Windows
YüksekCVSS 7,5İstismar yokEPSS %5php · php22 Ara 2019
- CVE-2023-3690631İzleyin
Windows Cryptographic Services Information Disclosure Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %2microsoft · windows 108 Ağu 2023
- CVE-2023-3690731İzleyin
Windows Cryptographic Services Information Disclosure Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %2microsoft · windows 108 Ağu 2023
- CVE-2024-2144231İzleyin
Windows USB Print Driver Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %1microsoft · windows 10 21h212 Mar 2024
- CVE-2024-4347430İzleyin
Microsoft SQL Server Information Disclosure Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1microsoft · sql server 201710 Eyl 2024
- CVE-2022-4751530İzleyin
An issue was discovered in drachtio-server before 0.8.20.
YüksekCVSS 7,5İstismar yokEPSS %1drachtio · drachtio-server18 Ara 2022
- CVE-2026-7058730İzleyin
Windows Remote Desktop Protocol Information Disclosure Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1microsoft · windows 10 16078 Eyl 2026
- CVE-2023-2402130İzleyin
Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over
YüksekCVSS 7,5İstismar yokEPSS %1trustwave · modsecurity20 Oca 2023
- CVE-2024-3119730İzleyin
Improper Null Termination in libfluid_msg library
YüksekCVSS 7,5İstismar yokEPSS %0opennetworking · libfluid msg18 Eyl 2024
- CVE-2025-6779030İzleyin
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.
YüksekCVSS 7,5İstismar yokEPSS %0drivelock · drivelock17 Ara 2025
- CVE-2024-3148429İzleyin
A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communicati
YüksekCVSS 7,3İstismar yokEPSS %0siemens · cpc80 central processing/communication14 May 2024
- CVE-2021-146928İzleyin
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
YüksekCVSS 7,2İstismar yokEPSS %1cisco · jabber24 Mar 2021
- CVE-2025-202628İzleyin
The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attackers to execute a null
YüksekCVSS 7,1Kavram kanıtıEPSS %0moxa · nport 6100-g2/6200-g2 series31 Ara 2025
- CVE-2021-112028İzleyin
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a string provided by the guest OS may not be p
YüksekCVSS 7,0İstismar yokEPSS %0nvidia · virtual gpu29 Eki 2021