CWE-489: Active Debug Code
The product is released with debugging code still enabled or active.
Also known as Leftover debug code.
A kind of CWE-710 Improper Adherence to Coding Standards.
From the CWE List. © The MITRE Corporation.
Newest
- hisense vidaa Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access 8.7 High
-
libcgi-pm-perlDebian,perl-CGIAzure Linux +1 more CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrecognised REQUEST_METHOD No score - fosowl agenticseek AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server 9.2 Critical
- sfm software technologies inc. costifier Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier 5.3 Medium
- red hat multicluster global hub Postgres-exporter: net/http/pprof exposed on metrics listener 7.1 High
- perforce p4 (helix core) RCE via exposed JDWP debug agent in P4Search 9.5 Critical
- eummena cadmos lti Cadmos LTI exposure of sensitive information via debug mode 9.2 Critical
- asus router An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated... 8.9 High
- yii2-starter-kit yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure 9.3 Critical
- anjvision yssd-rtmp-h5 Active debug code in Anjvision YSSD-RTMP-H5 5.3 Medium
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 more Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an... 3.0 Low
- red hat ansible automation platform 2.6, ansible automation platform 2.6 for rhel 9, ansible automation platform 2.7 +2 more Automation-controller: automation-controller-container: automation-controller: unauthenticated debug scheduler-trigger endpoints (allowany, routed without debug guard) allow advisory-lock starvation o… 8.2 High
- acer nitrosense v5 Electron DevTools Arbitrary Code Execution Vulnerability in NitroSense 6.1 Medium
- planet technology corp. igs-5225-8p2t4s v1, igs-5225-8p2t4s v2 +1 more PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCE 8.4 High
- getsimplecms, getsimplecms-ce +1 more GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw 9.8 Critical
- insyde software insydeh2o UEFI BIOS embedded Shell can be used to bypass Secure Boot 8.2 High
- ubiquiti inc cloud gateways, cloud keys, dream machines +10 more +12 more A malicious actor with access to the network, low privileges and under certain conditions could... 9.0 Critical
- red hat advanced cluster management for kubernetes 2.16, advanced cluster management for kubernetes 2.17 +1 more Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addresses 8.7 High
- ecovacs robotics deebot pro k1vac, deebot pro m1 +1 more DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. The telnet service may be... 8.7 High
- ecovacs robotics deebot pro k1vac, deebot pro m1 +1 more DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor... 8.7 High
- tigera calico, calico cloud, calico enterprise +2 more Unauthenticated Go pprof exposure in Calico debug server 6.0 Medium
- cp-plus ez-p21 ip camera Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera 7.0 High
- linux crypto: qat - remove unused character device and IOCTLs 7.8 High
- allwinner h616 Allwinner TV Box TV98 ADB exposed on network 8.6 High
- siemens cpci85 central processing/communication, sicore base system +1 more A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <... 8.4 High
- siemens cpci85 central processing/communication, sicore base system +1 more A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <... 7.1 High
- appium, appium appium\/base-driver +1 more Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes 6.5 Medium
- juicedata juicefs JuiceFS - Authentication Bypass via pprof and metrics Endpoints 7.0 High
-
fixurjavainstallcrates.io fixurjavainstall: Previous Fuji versions can accidentally wipe `/usr/share/man/man8` 1.2 Low - acer connect m6e 5g portable wifi router, connect m6e 5g firmware +1 more Elevated Root Command Execution via ai_cmd Sockets 8.7 High
- eidetic-labs stigmem stigmem-node Insecure Federation Transport Configuration 9.1 Critical
- aws rabbitmq aws Arbitrary file read in rabbitmq-aws plugin 8.3 High
- xyproto algernon Algernon: Single-file mode unconditionally enables debug mode 7.5 High
- gardyn cloud api Gardyn Cloud API Active Debug Code 6.9 Medium
- green house co., ltd. digital photo frame gh-wdf10a Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains an active debug code... 7.0 High
- putyourlightson craft-sprig Sprig Plugin for Craft CMS potentially discloses sensitive information via Sprig Playground 5.5 Medium
- obsidianforensics unfurl Unfurl - Werkzeug Debugger Exposure via String Config Parsing 9.3 Critical
- moxa nport 5000ai-m12 series, nport 5100 series, nport 5100a series +8 more +10 more A vulnerability exists in serial device servers where active debug code remains enabled in the... 7.0 High
- sap se netweaver enterprise portal Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal 6.1 Medium
- tianocore edk2 UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu 3.7 Low
- switchbot smart video doorbell Smart Video Doorbell firmware versions prior to 2.01.078 contain an active debug code... 8.6 High
- fortinet forticlient, forticlientwindows +1 more An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3,... 4.9 Medium
- No product listed Active debug code for some Intel UEFI reference platforms within Ring 0: Kernel may allow a... 8.3 High
- ubiquiti inc unifi talk g3 phones, unifi talk touch, unifi talk touch max +2 more A vulnerability was identified in certain UniFi Talk devices where internal debugging... 7.3 High
- watchguard fireware os WatchGuard Firebox leftover debug code vulnerability 8.9 High
- google android There is a possible escalation of privilege due to test/debugging code left in a production build... 8.4 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qca9367 firmware +10 more +12 more Leftover Debug Code in Secure Element 5.5 Medium
- abb switch actuator 4 du-83330, switch actuator, door/light 4 du -83330-500 +1 more Authentication bypass due to compatibility mode enabled by default 8.6 High
- lenovo legion space for legion go, legion space for legion pc +1 more An open debug interface was reported in the Legion Space software included on certain Legion... 4.8 Medium
- nasa cryptolib NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended... 3.5 Low
- Show olderLoading…