CWE-388
43 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 43
- Last 12 months
- 3
- Critical
- 12
- Known exploited
- 1
Critical 12High 18Medium 13Low 0Not scored 0
CVEs per yearBy the year they were published
- 20061
- 20177
- 20185
- 201814
- 20182
- 20183
- 20194
- 20203
- 20231
- 20263
Known exploitedNewest addition to KEV first
- CVE-2018-0155
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series…
Cisco IOS and IOS XE
ExploitedHigh8.6
Newest CVEs
- CVE-2026-20263
Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
Cisco · Cisco IOS XE Software
High8.6 - CVE-2026-20168
Cisco IoT Field Network Director Path Traversal Vulnerability
Cisco · Cisco IoT Field Network Director (IoT-FND)
Medium6.5 - CVE-2026-20006
Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TLS with Snort 3 Denial of Service Vulnerability
Cisco · Cisco Secure Firewall Threat Defense (FTD) Software
Medium5.8 - CVE-2023-20227
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of…
Cisco · Cisco IOS XE Software
High8.6 - CVE-2020-3509
Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability
Cisco · Cisco IOS XE Software
High8.6 - CVE-2020-3510
Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability
Cisco · Cisco IOS XE Software
High8.6 - CVE-2020-3512
Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability
Cisco · Cisco IOS
High7.4 - CVE-2019-2237
Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic gets…
Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Medium5.5 - CVE-2019-13046
linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.
Product not named
High7.8 - CVE-2019-12380
**DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c…
Product not named
Medium5.5