CWE-19 · Other weaknesses
Data Processing Errors
226CVEs
0exploited
1with a public check
36likely (EPSS 10%+)
SortMost likely exploited
226 CVEs with CWE-19 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2016-4977CheckSpring Security OAuth2 Remote Command ExecutionPivotal · Spring Security OAuth · 2017-05-25 | – | 80% | 2017-05-25 |
| CVE-2014-9034wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU cons…Wordpress · Wordpress · 2014-11-25 | – | 83% | 2014-11-25 |
| CVE-2014-7141The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (…Squid-Cache · Squid · 2014-11-26 | – | 76% | 2014-11-26 |
| CVE-2016-3236The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gol…Microsoft · Windows 10 · 2016-06-16 | – | 76% | 2016-06-16 |
| CVE-2015-5374A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : Al…Siemens · Siprotec Firmware · 2015-07-18 | – | 74% | 2015-07-18 |
| CVE-2016-2510BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via craft…Beanshell · Beanshell · 2016-04-07 | – | 70% | 2016-04-07 |
| CVE-2012-5357Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code w…Ektron · Ektron Content Management System · 2017-10-30 | – | 68% | 2017-10-30 |
| CVE-2007-0494ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only) allows remote attackers to cause…Isc · Bind · 2007-01-25 | – | 45% | 2007-01-25 |
| CVE-2015-0097Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted…Microsoft · Excel · 2015-03-11 | – | 41% | 2015-03-11 |
| CVE-2016-7274Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, a…Microsoft · Windows 10 · 2016-12-20 | – | 40% | 2016-12-20 |
| CVE-2016-7272The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10…Microsoft · Windows 10 · 2016-12-20 | – | 39% | 2016-12-20 |
| CVE-2014-8598The XML Import/Export plugin in MantisBT 1.2.x does not restrict access, which allows remote attackers to (1) upload arbitrary XML files via the import page or (2) obtain sensitiv…Mantisbt · Mantisbt · 2014-11-18 | – | 38% | 2014-11-18 |
| CVE-2015-2373The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of c…Microsoft · Windows 7 · 2015-07-14 | – | 38% | 2015-07-14 |
| CVE-2015-1648ASP.NET in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, when the customErrors configuration is disabled, allows remote attackers to obtain sens…Microsoft · .net Framework · 2015-04-14 | – | 35% | 2015-04-14 |
| CVE-2015-2432ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012…Microsoft · Windows 7 · 2015-08-15 | – | 30% | 2015-08-15 |
| CVE-2016-0150HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service (system hang) via crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vu…Microsoft · Windows 10 · 2016-04-12 | – | 28% | 2016-04-12 |
| CVE-2015-0081Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012…Microsoft · Windows 7 · 2015-03-11 | – | 24% | 2015-03-11 |
| CVE-2016-7117Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involvin…Linux · Linux Kernel · 2016-10-10 | – | 24% | 2016-10-10 |
| CVE-2014-0227java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to cont…Apache · Tomcat · 2015-02-16 | – | 21% | 2015-02-16 |
| CVE-2017-6920Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects safely during certain operations.Drupal.org · Drupal Core · 2018-08-06 | – | 20% | 2018-08-06 |
| CVE-2014-4492libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers…Apple · Iphone Os · 2015-01-30 | – | 20% | 2015-01-30 |
| CVE-2016-7273The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows…Microsoft · Windows 10 · 2016-12-20 | – | 19% | 2016-12-20 |
| CVE-2015-4026The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote a…Php · Php · 2015-06-09 | – | 19% | 2015-06-09 |
| CVE-2019-0801A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user t…Microsoft · Microsoft Office · 2019-04-09 | – | 19% | 2019-04-09 |
| CVE-2019-0630A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution…Microsoft · Windows · 2019-03-06 | – | 17% | 2019-03-06 |
| CVE-2015-4025PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypa…Php · Php · 2015-06-09 | – | 17% | 2015-06-09 |
| CVE-2015-1760Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document, a…Microsoft · Office · 2015-06-10 | – | 16% | 2015-06-10 |
| CVE-2015-1759Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."Microsoft · Office Compatibility Pack · 2015-06-10 | – | 16% | 2015-06-10 |
| CVE-2015-0224qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence set. NOTE: this vulnerability exists beca…Apache · Qpid · 2017-10-30 | – | 15% | 2017-10-30 |
| CVE-2019-0947A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity E…Microsoft · Microsoft Office · 2019-05-16 | – | 14% | 2019-05-16 |
| CVE-2019-0946A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity E…Microsoft · Microsoft Office · 2019-05-16 | – | 14% | 2019-05-16 |
| CVE-2019-0945A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity E…Microsoft · Microsoft Office · 2019-05-16 | – | 14% | 2019-05-16 |
| CVE-2019-12828An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to inject additional arg…Ea · Origin · 2019-06-14 | – | 13% | 2019-06-14 |
| CVE-2019-0633A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution…Microsoft · Windows Server · 2019-03-06 | – | 13% | 2019-03-06 |
| CVE-2015-1687Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Ex…Microsoft · Internet Explorer · 2015-06-10 | – | 13% | 2015-06-10 |
| CVE-2015-4147The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is an array, which allows…Php · Php · 2015-06-09 | – | 12% | 2015-06-09 |
| CVE-2015-7979NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid aut…Ntp · Ntp · 2017-01-30 | – | 12% | 2017-01-30 |
| CVE-2016-0077Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser Spo…Microsoft · Edge · 2016-02-10 | – | 9.7% | 2016-02-10 |
| CVE-2014-8826LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper protection mechanism via a crafted JAR arc…Apple · Mac Os X · 2015-01-30 | – | 8.7% | 2015-01-30 |
| CVE-2019-13917Exim 4.85 through 4.92 (fixed in 4.92.1) allows remote code execution as root in some unusual configurations that use the ${sort } expansion for items that can be controlled by an…Exim · Exim · 2019-07-25 | – | 8.6% | 2019-07-25 |
| CVE-2015-0203The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a s…Apache · Qpid · 2018-02-21 | – | 8.5% | 2018-02-21 |
| CVE-2019-0564A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This…Microsoft · ASP.NET Core · 2019-01-08 | – | 8.4% | 2019-01-08 |
| CVE-2014-8835The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpc_data data type, which allows attackers to exe…Apple · Mac Os X · 2015-01-30 | – | 8.3% | 2015-01-30 |
| CVE-2019-0548A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.…Microsoft · ASP.NET Core · 2019-01-08 | – | 8.2% | 2019-01-08 |
| CVE-2015-3225lib/rack/utils.rb in Rack before 1.5.4 and 1.6.x before 1.6.2, as used with Ruby on Rails 3.x and 4.x and other products, allows remote attackers to cause a denial of service (Sys…Rack Project · Rack · 2015-07-26 | – | 7.9% | 2015-07-26 |
| CVE-2019-1083A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability'.Microsoft · Microsoft .NET Framework 4.5.2 · 2019-07-15 | – | 7.8% | 2019-07-15 |
| CVE-2014-6053The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText…Libvncserver · Libvncserver · 2014-12-15 | – | 7.3% | 2014-12-15 |
| CVE-2014-9350TP-Link TL-WR740N 4 with firmware 3.17.0 Build 140520, 3.16.6 Build 130529, and 3.16.4 Build 130205 allows remote attackers to cause a denial of service (httpd crash) via vectors…Tp-Link · Tl-Wr740n · 2014-12-08 | – | 7.2% | 2014-12-08 |
| CVE-2015-5344The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an…Apache · Camel · 2016-02-03 | – | 7.1% | 2016-02-03 |
| CVE-2019-0815A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.Microsoft · ASP.NET Core · 2019-04-09 | – | 7.0% | 2019-04-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.