CWE-19: Data Processing Errors
Weaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.
From the CWE List. © The MITRE Corporation.
Newest
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396...6.5 Medium
- bouncycastle bc-javaThe Bouncy Castle JCE Provider carry a propagation bug7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreService Workers can intercept any request made by an <embed> or <object> tag in Fetch API in...6.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +32 more +34 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and...7.5 High
- qualcomm fsm9055 firmware, ipq4019 firmware, mdm9206 firmware +30 more +32 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC,...7.5 High
- qualcomm ipq4019 firmware, mdm9206 firmware, mdm9607 firmware +27 more +29 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile,...7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and...7.5 High
- qualcomm, inc. snapdragon mobile, qualcomm mdm9625 firmware, sd 400 firmware +1 more +3 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile...9.8 Critical
- cisco ios xeA vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software running on...7.5 High
- cisco ios xeA vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an...8.6 High
- cisco unity connectionA vulnerability in the SMTP relay of Cisco Unity Connection could allow an unauthenticated,...5.3 Medium
- apache qpidThe qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a...6.5 Medium
- apache qpidqpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service ...7.5 High
- ektron content management systemThe XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5...9.8 Critical
- ektron content management systemEktron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with...9.8 Critical
- linux kernelThe altivec_unavailable_exception function in arch/powerpc/kernel/traps.c in the Linux kernel...5.5 Medium
- juniper junoseJUNOSe: Line Card Reset: processor exception 0x68616c74 (halt) task: scheduler, upon receipt of crafted IPv6 packet7.5 High
- google androidWiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806,...7.5 High
- cisco cloud web securityCisco Cloud Web Security before 3.0.1.7 allows remote attackers to bypass intended filtering...7.5 High
- strongswanstrongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or...9.8 Critical
- cloud foundry diegoCloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service.7.5 High
- huawei ar1220 firmwareHuawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a...5.9 Medium
- pivotal spring security oauth, spring security oauth +1 moreSpring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views8.8 High
- cloudfoundry cloud foundry, garden linux, pivotal software cloud foundry elastic runtime +2 moreCloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to...9.8 Critical
- saltstack salt, fedoraproject fedora +1 moreSaltStack has insecure /tmp file handling in salt/modules/chef.py5.3 Medium
- saltstack salt, fedoraproject fedora +1 moreSalt improper handling of tmp files5.3 Medium
- huawei tecal bh620 v2 firmware, tecal bh621 v2 firmware, tecal bh622 v2 firmware +29 more +31 moreHuawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal...9.8 Critical
- huawei s2300 firmware, s3300 firmware, s5300 firmware +2 more +4 moreHuawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +12 more +14 moreThe Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2...7.5 High
- gnu glibcThe pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent...5.9 Medium
- ibm websphere mqIBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper...6.5 Medium
- siemens eta4 firmware, eta2 firmware +1 moreAn issue was discovered in Siemens ETA4 firmware (all versions prior to Revision 08) of the SM...7.5 High
- lenovo flex system x240 m5 bios, flex system x280 m6 bios, flex system x480 x6 bios +9 more +11 moreThe BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of...4.9 Medium
- autodesk fbx software development kitImproper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted...9.8 Critical
- avaya vsp operating system softwareAvaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2...9.8 Critical
- google androidA denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an...5.5 Medium
- google androidA denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to...5.5 Medium
- call-cc http-clientThe "http-client" egg always used a HTTP_PROXY environment variable to determine whether HTTP...7.5 High
- call-cc http-clientThe "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTP_PROXY...7.5 High
- shutter-project shutter/usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Installer in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...7.8 High
- microsoft officeMicrosoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreUniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...8.8 High
- microsoft windows 10, windows server 2016 +1 moreThe Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016...8.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...8.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server...7.8 High
- google chromeGoogle Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a...4.3 Medium
- Show moreLoading…