Skip to content
CVE Tracker

CWE-417

15 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
15
Last 12 months
0
Critical
5
Known exploited
0

Critical 5High 6Medium 2Low 2Not scored 0

CVEs per yearBy the year they were published

  1. 20177
  2. 20171
  3. 20185
  4. 20192

Newest CVEs

  • CVE-2019-9855

    Windows 8.3 path equivalence handling flaw allows LibreLogo script execution

    Document Foundation · LibreOffice

    Critical9.8
  • CVE-2019-14318

    Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration…

    Product not named

    Medium5.9
  • CVE-2018-13906

    The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application message in Snapdragon…

    Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

    Critical9.1
  • CVE-2018-14900

    On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port…

    Product not named

    High7.5
  • CVE-2018-6556

    The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files

    LXC

    Low3.3
  • CVE-2018-8929

    Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Client before 1.2.4-0224 allows remote…

    Synology · SSL VPN Client

    High7.3
  • CVE-2017-7760

    The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. The location of the original file can be…

    Mozilla · Firefox ESR

    High7.8
  • CVE-2018-5254

    Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDATE message.

    Product not named

    High7.5
  • CVE-2017-3969

    SB10192 - Network Security Management (NSM) - Abuse of communication channels vulnerability

    McAfee · Network Security Management (NSM)

    High8.2
  • CVE-2017-8822

    In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have…

    Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9

    Low3.7

Vendors it comes up for most

  1. Document Foundation1
  2. Huawei Technologies Co., Ltd.1
  3. McAfee1
  4. Mozilla1
  5. Qualcomm, Inc.1
  6. Red Hat, Inc.1
  7. Synology1