CWE-391 vulnerabilities

• gen digital avast antivirus, avast one, avast premium security, avast ultimate, avast business security, avg antivirus free, avg internet security, avg ultimate, norton antivirus plus, norton 360 standard, norton 360 deluxe, norton 360 advanced +2 more AvastSvc denial of service via unhandled JsonCpp exceptions in native message handlers CVE-2026-12067 No scoreNovember 6, 2026
• hcl software bigfix aex HCL BigFix AEX is affected by multiple security vulnerabilities. CVE-2026-67080 6.5 MediumOctober 28, 2026
• zammad Zammad: PGP signature spoofing via unvalidated verification return CVE-2026-56727 7.1 HighSeptember 25, 2026
• jahlives openssl encrypt openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode CVE-2026-74900 Fix available 9.3 CriticalAugust 17, 2026
• mmaitre314 picklescan picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic Flaw CVE-2025-71325 Fix available 9.3 CriticalAugust 12, 2025
• apache tomcat, debian linux +1 more Apache Tomcat: Authentication bypass when using Jakarta Authentication API CVE-2024-52316 Public exploitFix available 9.8 CriticalNovember 18, 2024
• cisco ios xr software, ios xr +1 more Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability CVE-2022-20849 6.1 MediumNovember 15, 2024
• envoyproxy envoy Envoy incorrectly accepts HTTP 200 response for entering upgrade mode CVE-2024-23326 Fix available 5.9 MediumJune 4, 2024
• google android, linuxfoundation yocto, mediatek mt2737 +61 more +63 more In DA, there is a possible permission bypass due to an incorrect status check. This could lead to... CVE-2023-32871 Fix available 5.3 MediumMay 1, 2024
• google android, unisoc s8000, t760 +3 more +5 more In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling.... CVE-2023-52533 5.3 MediumApril 8, 2024
• froxlor, froxlor froxlor/froxlor +1 more Unchecked Error Condition in froxlor/froxlor CVE-2023-0572 Fix available 5.3 MediumJanuary 29, 2023
• juniper junos, juniper networks junos os +1 more Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message CVE-2022-22160 6.5 MediumJanuary 19, 2022
• samba, redhat enterprise linux +1 more A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC... CVE-2020-14383 Fix available 6.5 MediumOctober 29, 2020
• [unknown] python-ecdsa Duplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA CVE-2019-14853 Fix available 3.7 LowOctober 8, 2019
• grunt-gh-pages project grunt-gh-pages, hackerone grunt-gh-pages node module +1 more grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file CVE-2016-10526 Fix available 8.6 HighMay 31, 2018
• linux kernel In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before... CVE-2018-1091 Fix available 5.5 MediumMarch 27, 2018
• the x.org foundation xorg-x11-server, x.org x server, debian linux +2 more xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing... CVE-2017-12187 Fix available 9.8 CriticalOctober 12, 2017
• the x.org foundation xorg-x11-server, x.org x server, debian linux +2 more xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing... CVE-2017-12186 Fix available 9.8 CriticalOctober 12, 2017
• x.org x server, debian linux +1 more xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension... CVE-2017-12185 Fix available 9.8 CriticalOctober 12, 2017
• the x.org foundation xorg-x11-server, x.org x server, debian linux +2 more xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing... CVE-2017-12184 Fix available 9.8 CriticalOctober 12, 2017
• the x.org foundation xorg-x11-server, x.org x server, debian linux +2 more xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing... CVE-2017-12183 Fix available 9.8 CriticalOctober 12, 2017
• the x.org foundation xorg-x11-server, x.org x server, debian linux +2 more xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing... CVE-2017-12182 Fix available 9.8 CriticalOctober 12, 2017
• the x.org foundation xorg-x11-server, x.org x server, debian linux +2 more xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing... CVE-2017-12181 Fix available 9.8 CriticalOctober 12, 2017
• the x.org foundation xorg-x11-server, x.org x server, debian linux +2 more xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing... CVE-2017-12180 Fix available 9.8 CriticalOctober 12, 2017
• the x.org foundation xorg-x11-server, x.org x server, debian linux +2 more xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S... CVE-2017-12179 Fix available 9.8 CriticalOctober 12, 2017
• the x.org foundation xorg-x11-server, x.org x server, debian linux +2 more xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function... CVE-2017-12178 Fix available 9.8 CriticalOctober 12, 2017
• the x.org foundation xorg-x11-server, x.org x server, debian linux +2 more xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function... CVE-2017-12177 Fix available 9.8 CriticalOctober 12, 2017
• the x.org foundation xorg-x11-server, x.org x server, debian linux +2 more xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection... CVE-2017-12176 Fix available 9.8 CriticalOctober 12, 2017
• red hat, inc. fedora-arm-installer, fedoraproject arm installer +1 more fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due... CVE-2017-7496 7.0 HighJune 26, 2017