CWE-17
166 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 166
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 0
Critical 1High 56Medium 93Low 16Not scored 0
CVEs per yearBy the year they were published
- 19991
- 20052
- 20061
- 20101
- 201533
- 20156
- 201810
- 2018111
- 20201
Newest CVEs
- CVE-2020-3222
Cisco IOS XE Software Web UI Unauthenticated Proxy Service Vulnerability
Cisco · Cisco IOS XE Software 16.10.1
Medium4.3 - CVE-2016-2169
Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. An application…
Cloud Foundry · Cloud Controller
Medium5.3 - CVE-2016-10481
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650,…
Qualcomm, Inc. · Snapdragon Mobile, Snapdragon Wear
Critical9.8 - CVE-2015-9213
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M,…
Qualcomm, Inc. · Snapdragon Mobile, Snapdragon Wear
High7.5 - CVE-2016-10075
The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the…
Product not named
High7.8 - CVE-2016-10142
An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages. (The scope of this CVE is all affected IPv6…
Product not named
High8.6 - CVE-2016-3721
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via…
Product not named
Medium4.3 - CVE-2015-5229
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow…
Product not named
High7.5 - CVE-2016-1640
The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an…
Product not named
Medium4.3 - CVE-2016-2314
GlobespanVirata ftpd 1.0, as used on Huawei SmartAX MT882 devices V200R002B022 Arg, allows remote authenticated users to cause a denial of service (device…
Product not named
Medium4.9