Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Weaknesses
CWE-189

CWE-189: Numeric Errors

Weaknesses in this category are related to improper calculation or conversion of numbers.

From the CWE List. © The MITRE Corporation.

Newest

Known exploitedIn KEVPublic exploitFix available

sap network interface routerInteger overflow in SAP Network Interface Router (SAProuter) 40.4 allows remote attackers to...CVE-2014-85895.0 MediumNovember 4, 2014
php, apple mac os x, redhat enterprise linux +6 more +8 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before...CVE-2015-4022Fix availableEPSS 20.1%7.5 HighOctober 28, 2014
php, apple mac os x, redhat enterprise linux +6 more +8 moreThe phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and...CVE-2015-4021Fix availableEPSS 20.5%5.0 MediumOctober 28, 2014
phpInteger overflow in the object_custom function in ext/standard/var_unserializer.c in PHP before 5...CVE-2014-3669Fix availableEPSS 28.9%7.5 HighOctober 28, 2014
python, apple mac os x +1 moreInteger overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to...CVE-2014-7185Fix available6.4 MediumOctober 7, 2014
rsyslog, sysklogd project sysklogd +1 moreInteger overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows...CVE-2014-3683Fix available5.0 MediumOctober 2, 2014
haproxyMultiple integer overflows in the http_request_forward_body function in proto_http.c in HAProxy 1...CVE-2014-6269Fix available5.0 MediumSeptember 30, 2014
linux kernel, canonical ubuntu linux +1 moreOff-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the...CVE-2014-9683Fix available3.6 LowSeptember 24, 2014
libvncserver, canonical ubuntu linux, debian linux +2 moreThe rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and...CVE-2014-6054Fix available4.3 MediumSeptember 24, 2014
libvncserver, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and...CVE-2014-6051Fix available7.5 HighSeptember 24, 2014
apple iphone os, mac os x, tvos +2 moreInteger overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute...CVE-2014-43899.3 HighSeptember 18, 2014
apple iphone os, mac os x, tvos +2 moreInteger overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote...CVE-2014-4377Public exploit6.8 MediumSeptember 18, 2014
srvxMultiple integer overflows in the HelpServ module (mod-helpserv.c) in srvx 1.3.1 allow remote...CVE-2014-55083.5 LowSeptember 5, 2014
eximexpand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to...CVE-2014-2972Fix available4.6 MediumSeptember 4, 2014
christos zoulas file, php +1 moreInteger overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in...CVE-2014-3587Fix availableEPSS 20.2%4.3 MediumAugust 21, 2014
citrix access gateway plug-inInteger overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix...CVE-2011-25936.8 MediumAugust 12, 2014
mit kerberos 5Off-by-one error in the krb5_encode_krbsecretkey function in plugins/kdb/ldap/libkdb_ldap...CVE-2014-4345Fix available8.5 HighAugust 8, 2014
autodesk sketchbook proInteger overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute...CVE-2014-39389.3 HighJuly 23, 2014
shopizerShopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping...CVE-2014-4962Public exploit6.4 MediumJuly 15, 2014
bestpractical rt, email\ \ +1 moreAlgorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0...CVE-2014-1474Fix available5.0 MediumJuly 15, 2014
transmissionbt transmission, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreInteger overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission...CVE-2014-4909Fix available6.8 MediumJuly 11, 2014
freerdp, opensuse +1 moreMultiple integer overflows in client/X11/xf_graphics.c in FreeRDP allow remote attackers to have...CVE-2014-0250Fix available7.5 HighJuly 8, 2014
yann collet lz4Yann Collet LZ4 before r119, when used on certain 32-bit platforms that allocate memory beyond...CVE-2014-4715Fix available5.0 MediumJuly 3, 2014
apple iphone os, mac os x, tvos +2 moreInteger underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV...CVE-2014-135910.0 HighJuly 1, 2014
apple iphone os, mac os x, tvos +2 moreInteger overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV...CVE-2014-135810.0 HighJuly 1, 2014
wiresharkThe dissect_frame function in epan/dissectors/packet-frame.c in the frame metadissector in...CVE-2014-4020Fix available4.3 MediumJune 18, 2014
digium asteriskThe Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Source 12.x before...CVE-2014-40454.3 MediumJune 17, 2014
directfb, opensuse, suse linux enterprise desktop +3 more +5 moreMultiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher...CVE-2014-297710.0 HighJune 11, 2014
apache tomcatImproper Neutralization of CRLF Sequences in HTTP Headers in Apache TomcatCVE-2014-0099Fix available4.3 MediumMay 31, 2014
apache tomcatInteger Overflow or Wraparound in Apache TomcatCVE-2014-0075Public exploitFix availableEPSS 17.6%5.0 MediumMay 31, 2014
nero mediahomeMultiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier...CVE-2012-5876Public exploit5.0 MediumMay 30, 2014
google chrome, v8, fedoraproject fedora +2 moreInteger underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in...CVE-2014-3152Fix available7.5 HighMay 21, 2014
google chromeInteger overflow in the AudioInputRendererHost::OnCreateStream function in content/browser...CVE-2014-1744Fix available7.5 HighMay 21, 2014
x libxfontThe bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x...CVE-2015-1804Fix available8.5 HighMay 15, 2014
google android debug bridge, android sdk platform tools, opensuse +2 moreInteger signedness error in system/core/adb/adb_client.c in Android Debug Bridge (ADB) for...CVE-2014-1909Fix available7.5 HighMay 14, 2014
google chromeMultiple integer overflows in the replace-data functionality in the CharacterData interface...CVE-2014-1741Fix available7.5 HighMay 14, 2014
x libxfont, canonical ubuntu linux +1 moreMultiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3)...CVE-2014-0211Fix available7.5 HighMay 13, 2014
x libxfont, canonical ubuntu linux +1 moreMultiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org...CVE-2014-0209Fix available4.6 MediumMay 13, 2014
libpngMultiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial...CVE-2013-7354Fix available5.0 MediumMay 6, 2014
libpngInteger overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5...CVE-2013-7353Fix available5.0 MediumMay 6, 2014
fedoraproject fedora, randall hand yerase\'s tnef stream reader +1 moreOff-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows...CVE-2010-5109Fix available4.3 MediumMay 5, 2014
linux kernelOff-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux...CVE-2014-2889Fix available4.6 MediumApril 27, 2014
cisco iosCisco IOS before 15.3(2)T, when scansafe is enabled, allows remote attackers to cause a denial of...CVE-2012-46514.3 MediumApril 23, 2014
qemuOff-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before...CVE-2014-2894Fix available7.2 HighApril 23, 2014
uclouvain openjpegMultiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers...CVE-2013-428910.0 HighApril 18, 2014
qemu, redhat enterprise linux +1 moreInteger overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and...CVE-2014-0150Fix available4.9 MediumApril 18, 2014
elfutils project elfutilsInteger overflow in the check_section function in dwarf_begin_elf.c in the libdw library, as used...CVE-2014-0172Fix available6.8 MediumApril 11, 2014
google chromeGoogle V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy...CVE-2014-17217.5 HighApril 9, 2014
google chromeInteger overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser...CVE-2014-17187.5 HighApril 9, 2014
google chromeGoogle V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts...CVE-2014-17177.5 HighApril 9, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open