CWE-19: Data Processing Errors
Weaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.
From the CWE List. © The MITRE Corporation.
Newest
- freebsdFreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a...7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which...4.7 Medium
- huawei te60 firmwareThe presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and...5.3 Medium
- ntpNTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service ...7.5 High
- mozilla firefox, network security services, canonical ubuntu linux +2 more +4 moreMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...5.9 Medium
- cisco ios, ios xe +1 moreThe IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote...5.0 Medium
- xenThe memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand...4.7 Medium
- apple tvos, watchos, iphone os +1 more +3 morezlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1,...6.8 Medium
- pcre, oracle linux +1 morePCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain...7.5 High
- xenXen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain...2.1 Low
- shutter-project shutterApp/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute...7.8 High
- apple iphone osSafari in Apple iOS before 8.4.1 does not limit the rate of JavaScript alert messages, which...4.3 Medium
- microsoft windows 7, windows 8, windows 8.1 +5 more +7 moreATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows...9.3 High
- net-snmpThe snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the...7.5 High
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 morenamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...7.8 High
- google chrome, debian linux, opensuse +5 more +7 moreThe ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for...6.8 Medium
- siemens siprotec firmwareA vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module :...7.8 High
- juniper junosThe SRX Network Security Daemon (nsd) in Juniper SRX Series services gateways with Junos 12.1X44...5.0 Medium
- microsoft windows 7, windows 8, windows server 2012 +2 moreThe Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and...10.0 High
- hospira lifecare pcainfusion firmwareHospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote...7.8 High
- icsgmbh pactwarePACTware 4.1 SP3 allows remote attackers to cause a denial of service (application crash) via a...4.3 Medium
- rack project rack, debian linux, opensuse +2 moreRack vulnerable to Denial of Service via large parameter depth request5.0 Medium
- pythonThe ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does...5.9 Medium
- microsoft officeMicrosoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a...8.8 High
- microsoft office, office compatibility pack +1 moreMicrosoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1...9.3 High
- microsoft office compatibility packMicrosoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or...9.3 High
- php, apple mac os x, redhat enterprise linux desktop +5 more +7 moreThe SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5...7.5 High
- sonicwall analyzer, global management system, uma em5000 firmware +2 moreThe GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before...9.0 High
- php, apple mac os x, redhat enterprise linux +6 more +8 morePHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon...7.5 High
- microsoft .net framework, live meeting, lync +2 more +4 moreThe Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5,...9.3 High
- cisco ios xrCisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is...7.8 High
- microsoft .net frameworkASP.NET in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, when...2.6 Low
- cisco unity connectionThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...7.1 High
- cisco unity connectionThe call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6...7.1 High
- cisco unity connectionThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...7.1 High
- cisco unity connectionThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...7.1 High
- cisco unity connection, unity connection 8.5, unity connection 8.6 +2 moreThe Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8...7.1 High
- freeipa, fedoraproject fedora +1 moreThe get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly...5.0 Medium
- dulwich project dulwich, debian linux +1 moreDulwich Arbitrary code execution via commit with directory path starting with .git7.5 High
- linux kernelThe XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during...7.2 High
- ubuntu upstart, vivid +1 moreThe logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2...7.2 High
- apple iphone os, tvos +1 moreMobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk...5.0 Medium
- microsoft excel, powerpoint, word +2 moreMicrosoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2...9.3 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreWindows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows...9.3 High
- google chromeGoogle Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider...4.3 Medium
- wireshark, opensuse, oracle solaris +2 moreepan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types...5.0 Medium
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 morenet/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a...5.0 Medium
- cisco ios, ios xe +1 moreThe RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of...6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call...4.3 Medium
- Show moreLoading…