CWE-19: Data Processing Errors
Weaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.
From the CWE List. © The MITRE Corporation.
Newest
- cisco carrier routing system, ios xr +1 moreCisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 and 5.1.4...7.1 High
- cisco telepresence mcu 4500 series softwareCisco TelePresence MCU devices with software 4.5(1.45) allow remote attackers to cause a denial...7.8 High
- google emailThe Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of...5.0 Medium
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreThe font mapper in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2,...4.7 Medium
- apple mac os xThe xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a...9.3 High
- apple mac os xLaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which...5.0 Medium
- apple mac os xIOHIDFamily in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a kernel...10.0 High
- apple mac os xcoresymbolicationd in CoreSymbolication in Apple OS X before 10.10.2 does not verify that...10.0 High
- apple iphone os, mac os x, tvos +2 morelibnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does...7.5 High
- apple iphone os, mac os x, tvos +2 moreIOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does...10.0 High
- apple iphone os, mac os x, tvos +2 moreFontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows...7.5 High
- google chromehydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle...7.5 High
- arbiter 1094b gps substation clock, arbiter systems model 1094b gps substation clock +1 moreArbiter Systems 1094B GPS Clock Insufficient Verification of Data Authenticity5.4
- eucalyptusThe cloud controller (aka CLC) component in Eucalyptus 3.3.x and 3.4.x before 3.4.2, when the dns...4.3 Medium
- strongswan, canonical ubuntu linux, debian linux +2 more +4 morestrongSwan 4.5.x through 5.2.x before 5.2.1 allows remote attackers to cause a denial of service ...5.0 Medium
- cisco ios xrCisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a...5.0 Medium
- ibm security access manager for mobile, security access manager for web +1 moreIBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x...4.0 Medium
- nvidia gpu driverThe NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R340.x before R340...7.5 High
- tp-link tl-wr740n, tl-wr740n firmware +1 moreTP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build...5.0 Medium
- digium asterisk, certified asterisk +1 moreAsterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6...4.0 Medium
- justsystems ichitaro, ichitaro pro +1 moreUnspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7,...10.0 High
- wordpresswp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3,...5.0 Medium
- mantisbtThe XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote...6.4 Medium
- apache qpidXML external entity (XXE) vulnerability in the XML Exchange module in Apache Qpid 0.30 allows...4.3 Medium
- rubyonrails railsThe str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent...5.0 Medium
- wireshark, debian linux, mageia +2 more +4 moreepan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x...5.0 Medium
- wireshark, opensuse +1 moreThe dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP...5.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...7.5 High
- libvncserver, canonical ubuntu linux, debian linux +2 moreThe rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and...5.0 Medium
- squid-cache squidThe pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or...6.4 Medium
- thekelleys dnsmasq, oracle solaris +1 moreThe tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of...6.4 Medium
- mumbleThe client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an...5.0 Medium
- zend framework, zendopenid, zendrest +7 more +9 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc6.8 Medium
- zend framework, zendopenid, zendrest +7 more +9 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc6.4 Medium
- apache tomcatImproper Input Validation in Apache Tomcat6.4 Medium
- isc bindBIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured...2.6 Low
- isc bindISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to...4.3 Medium
- ez publishThe admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8...5.0 Medium
- microsoft windows ntWindows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.10.0 High