CWE-19: Data Processing Errors
Weaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.
From the CWE List. © The MITRE Corporation.
Newest
- huawei harmonyos DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may... 7.5 High
- huawei harmonyos Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this... 4.7 Medium
- huawei harmonyos Data processing vulnerability in the certificate management module. Impact: Successful... 6.2 Medium
- huawei emui, harmonyos +1 more Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this... 6.5 Medium
- cisco ios xe software, ios xe +1 more A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst... 7.4 High
- huawei emui, harmonyos +1 more Mismatch vulnerability in the serialization process in the communication system. Successful... 7.5 High
- juniper junos, juniper networks junos os +1 more Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled 5.9 Medium
- cisco ios xe, ios xe software 17.1.1 +1 more Cisco IOS XE Software for Cisco 4461 Integrated Services Routers Denial of Service Vulnerability 8.6 High
- juniper junos, juniper networks junos os +1 more Junos OS: MX Series: PFE on the line card may crash due to memory leak. 6.5 Medium
- cisco asr 920 series aggregation services router, ios xe +1 more Cisco ASR 920 Series Aggregation Services Router Model 12SZ-IM SNMP Denial of Service Vulnerability 6.3 Medium
- metabox meta box The Meta Box plugin before 4.16.2 for WordPress mishandles the uploading of files to custom folders. 7.5 High
- exim, debian linux +1 more Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual... 9.8 Critical
- ibm spectrum protect A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is... 5.1 Medium
- onosproject onos In ONOS 1.15.0, apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java... 9.8 Critical
- microsoft .net framework, .net framework 2.0, .net framework 3.0 +39 more +41 more A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly... 7.5 High
- microsoft windows server, windows server, version 1903 (server core installation), windows server 2012 +2 more +4 more A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle... 7.5 High
- ea origin An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of... 8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1703 +29 more +31 more Microsoft IIS Server Denial of Service Vulnerability 4.4 Medium
- freenetproject freenet Freenet 1483 has a MIME type bypass that allows arbitrary JavaScript execution via a crafted... 8.8 High
- intel server platform services Improper data sanitization vulnerability in subsystem in Intel(R) SPS before versions SPS_E5_04... 6.7 Medium
- microsoft asp.net core Denial of service in ASP.NET Core 7.5 High
- microsoft .net core, .net framework, .net framework 2.0 +45 more +47 more Denial of service in ASP.NET Core 7.5 High
- microsoft .net core, .net framework, .net framework 2.0 +45 more +47 more Denial of service in ASP.NET Core 7.5 High
- microsoft office A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine... 7.8 High
- microsoft office, office 365 proplus +1 more A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine... 7.8 High
- microsoft office, office 365 proplus, office 365 +2 more A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine... 7.8 High
- gnu glibc The nscd daemon in the GNU C Library (glibc) before version 2.5 does not close incoming client... 5.5 Medium
- webkitgtk, wpewebkit wpe webkit +1 more WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy... 5.3 Medium
- microsoft exchange server, exchange server 2013, exchange server 2016 +1 more +3 more A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails... 5.4 Medium
- microsoft asp.net core A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ... 7.5 High
- microsoft office, office 365 proplus +1 more A remote code execution vulnerability exists when Microsoft Office fails to properly handle... 7.8 High
- apple safari, iphone os +1 more Clearing a history item may not clear visits with redirect chains. The issue was addressed with... 7.5 High
- fusioninventory The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles... 7.5 High
- oembed project oembed plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements. 9.8 Critical
- microsoft windows, windows server, windows 10 +7 more +9 more A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2... 8.8 High
- microsoft windows, windows server, windows 10 +7 more +9 more A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2... 8.8 High
- mishubd wp human resource management The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications. 7.5 High
- bluemind In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application... 7.5 High
- gnu glibc, netapp cloud backup, ontap select deploy administration utility +1 more +3 more In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses... 7.5 High
- qualcomm mdm9607 firmware, mdm9640 firmware, mdm9650 firmware +19 more +21 more Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon... 9.8 Critical
- zemana antimalware Zemana AntiMalware before 3.0.658 Beta mishandles update logic. 9.8 Critical
- facebook wangle Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection,... 5.9 Medium
- juniper junos, juniper networks junos os +1 more Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet 7.5 High
- juniper junos, juniper networks junos os +1 more Junos OS: RPD crash upon receipt of malformed PIM packet 6.5 Medium
- microsoft asp.net core Denial of service in ASP.NET Core 7.5 High
- microsoft asp.net core A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka ... 7.5 High
- facebook hhvm A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can... 5.9 Medium
- cisco ios, ios xe, ios software +2 more Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability 8.6 High
- cisco firepower system software, firesight system software +1 more Cisco Firepower System Software Detection Engine Denial of Service Vulnerability 7.5 High
- drupal, drupal core, drupal.org drupal core +2 more Drupal PECL YAML parser unsafe object handling 9.8 Critical
- Show olderLoading…