CWE-254 · Other weaknesses
Security Features
352CVEs
0exploited
0with a public check
16likely (EPSS 10%+)
SortMost likely exploited
352 CVEs with CWE-254 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2016-0161Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerabili…Microsoft · Edge · 2016-04-12 | – | 68% | 2016-04-12 |
| CVE-2016-2296Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive infor…Meteocontrol · Web'log Basic 100 · 2016-05-14 | – | 64% | 2016-05-14 |
| CVE-2015-1793The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identifica…Openssl · Openssl · 2015-07-09 | – | 58% | 2015-07-09 |
| CVE-2016-2118The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-t…Samba · Samba · 2016-04-12 | – | 37% | 2016-04-12 |
| CVE-2016-3238The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Wind…Microsoft · Windows 10 · 2016-07-13 | – | 34% | 2016-07-13 |
| CVE-2016-3198Microsoft Edge allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted document, aka "Microsoft Edge Security Feature Bypass."Microsoft · Edge · 2016-06-16 | – | 32% | 2016-06-16 |
| CVE-2015-1158The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remo…Cups · Cups · 2015-06-26 | – | 30% | 2015-06-26 |
| CVE-2016-0128The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows…Microsoft · Windows 10 · 2016-04-12 | – | 21% | 2016-04-12 |
| CVE-2015-0005The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2, when a Domain Controller is configured, allows…Microsoft · Windows Server 2008 · 2015-03-11 | – | 19% | 2015-03-11 |
| CVE-2016-3279Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word…Microsoft · Excel · 2016-07-13 | – | 16% | 2016-07-13 |
| CVE-2016-0158Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerabili…Microsoft · Edge · 2016-04-12 | – | 15% | 2016-04-12 |
| CVE-2016-3354The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1…Microsoft · Windows 10 · 2016-09-14 | – | 14% | 2016-09-14 |
| CVE-2016-7281The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "M…Microsoft · Edge · 2016-12-20 | – | 13% | 2016-12-20 |
| CVE-2016-0019The Remote Desktop Protocol (RDP) service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended access restrictions and establish session…Microsoft · Windows 10 · 2016-01-13 | – | 12% | 2016-01-13 |
| CVE-2016-3353Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka…Microsoft · Internet Explorer · 2016-09-14 | – | 12% | 2016-09-14 |
| CVE-2016-2115Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle atta…Samba · Samba · 2016-04-25 | – | 10% | 2016-04-25 |
| CVE-2016-9900External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cross-domain data leakag…Mozilla · Firefox · 2018-06-11 | – | 9.6% | 2018-06-11 |
| CVE-2016-2112The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which al…Samba · Samba · 2016-04-25 | – | 9.4% | 2016-04-25 |
| CVE-2015-3900RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to…Rubygems · Rubygems · 2015-06-24 | – | 8.9% | 2015-06-24 |
| CVE-2016-0734The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct click…Apache · Activemq · 2016-04-07 | – | 8.6% | 2016-04-07 |
| CVE-2016-2110The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-dow…Samba · Samba · 2016-04-25 | – | 8.3% | 2016-04-25 |
| CVE-2015-0009The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…Microsoft · Windows 7 · 2015-02-11 | – | 8.1% | 2015-02-11 |
| CVE-2015-3693Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers…Apple · Mac Os X · 2015-07-03 | – | 7.6% | 2015-07-03 |
| CVE-2016-10178An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/sh" command.Dlink · Dwr-932b Firmware · 2017-01-30 | – | 7.5% | 2017-01-30 |
| CVE-2016-0137The Click-to-Run (C2R) implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft AP…Microsoft · Office · 2016-09-14 | – | 6.8% | 2016-09-14 |
| CVE-2016-6957Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and…Adobe · Acrobat · 2016-10-13 | – | 5.8% | 2016-10-13 |
| CVE-2016-6497main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag t…Apache · Groovy Ldap · 2017-01-18 | – | 5.7% | 2017-01-18 |
| CVE-2016-7401The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection m…Djangoproject · Django · 2016-10-03 | – | 5.7% | 2016-10-03 |
| CVE-2008-1195Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote a…Sun · Jdk · 2008-03-06 | – | 5.7% | 2008-03-06 |
| CVE-2014-8152Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism via a crafted XML document.Apache · Santuario Xml Security For Java · 2015-01-21 | – | 5.6% | 2015-01-21 |
| CVE-2015-8368ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.l…Ntop · Ntopng · 2015-12-17 | – | 5.1% | 2015-12-17 |
| CVE-2014-5334FreeNAS before 9.3-M3 has a blank admin password, which allows remote attackers to gain root privileges by leveraging a WebGui login.Freenas · Freenas · 2018-01-08 | – | 5.1% | 2018-01-08 |
| CVE-2015-7576The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on…Rubyonrails · Rails · 2016-02-16 | – | 4.9% | 2016-02-16 |
| CVE-2016-3320Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging (…Microsoft · Windows 10 · 2016-08-09 | – | 4.9% | 2016-08-09 |
| CVE-2016-6582The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token R…Doorkeeper Project · Doorkeeper · 2017-01-23 | – | 4.8% | 2017-01-23 |
| CVE-2015-8286Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000.Zhuhai · Raysharp Firmware · 2016-02-18 | – | 4.6% | 2016-02-18 |
| CVE-2014-6050phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request.Phpmyfaq · Phpmyfaq · 2018-08-28 | – | 4.6% | 2018-08-28 |
| CVE-2016-6597Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via…Sophos · Mobile Control Eas Proxy · 2016-08-10 | – | 4.5% | 2016-08-10 |
| CVE-2008-1192Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier, and 1.3.1_21 and ear…Sun · Jdk · 2008-03-06 | – | 4.5% | 2008-03-06 |
| CVE-2015-6029HP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface, which makes it easier for remote attackers to obtain access via a brute-force appro…Hp · Arcsight Logger · 2015-11-04 | – | 4.4% | 2015-11-04 |
| CVE-2016-10185An issue was discovered on the D-Link DWR-932B router. A secure_mode=no line exists in /var/miniupnpd.conf.Dlink · Dwr-932b Firmware · 2017-01-30 | – | 4.3% | 2017-01-30 |
| CVE-2015-8914The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently…Openstack · Neutron · 2016-06-17 | – | 4.3% | 2016-06-17 |
| CVE-2006-6503Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) prote…Mozilla · Firefox · 2006-12-20 | – | 4.2% | 2006-12-20 |
| CVE-2015-7554The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact…Libtiff · Libtiff · 2016-01-08 | – | 4.2% | 2016-01-08 |
| CVE-2017-8227Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API inter…Amcrest · Ipm-721s Firmware · 2019-07-03 | – | 4.1% | 2019-07-03 |
| CVE-2015-1274Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by p…Google · Chrome · 2015-07-23 | – | 3.9% | 2015-07-23 |
| CVE-2002-0493Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.Apache · Tomcat · 2003-04-02 | – | 3.8% | 2003-04-02 |
| CVE-2018-0353A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor (L4TM)…Cisco · Cisco Web Security Appliance unknown · 2018-06-07 | – | 3.8% | 2018-06-07 |
| CVE-2014-3501Apache Cordova Android before 3.5.1 allows remote attackers to bypass the HTTP whitelist and connect to arbitrary servers by using JavaScript to open WebSocket connections through…Apache · Cordova · 2014-11-15 | – | 3.7% | 2014-11-15 |
| CVE-2016-2047The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and…Mariadb · Mariadb · 2016-01-27 | – | 3.7% | 2016-01-27 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.