CWE-417 · Other weaknesses
Communication Channel Errors
12CVEs
SortMost likely exploited
12 CVEs with CWE-417 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2019-14318Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousa…Cryptopp · Crypto++ · 2019-07-30 | – | 3.1% | 2019-07-30 |
| CVE-2019-9855Windows 8.3 path equivalence handling flaw allows LibreLogo script executionDocument Foundation · LibreOffice · 2019-09-06 | – | 3.0% | 2019-09-06 |
| CVE-2017-6520The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote att…Bose · Soundtouch 30 · 2017-05-01 | – | 2.0% | 2017-05-01 |
| CVE-2016-9879An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2.1. Spring Security does not consider URL path parameters when processing…Ibm · Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2… · 2017-01-06 | – | 1.5% | 2017-01-06 |
| CVE-2018-5254Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDATE message.Arista · Eos · 2018-04-12 | – | 1.2% | 2018-04-12 |
| CVE-2017-1000197October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server.Octobercms · October · 2017-11-17 | – | 1.2% | 2017-11-17 |
| CVE-2017-2712S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency check. An attacker may craft malformed pac…Huawei Technologies Co., Ltd. · S3300 · 2017-11-22 | – | 1.1% | 2017-11-22 |
| CVE-2018-14900On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100.Epson · Wf-2750 Firmware · 2018-08-30 | – | 1.1% | 2018-08-30 |
| CVE-2017-8822In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have incompletely downloaded desc…Tor Project · Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14… · 2017-12-03 | – | 0.9% | 2017-12-03 |
| CVE-2017-3969SB10192 - Network Security Management (NSM) - Abuse of communication channels vulnerabilityMcAfee · Network Security Management (NSM) · CVSS 8.2 · 2018-04-04 | 8.2 | 0.8% | 2018-04-04 |
| CVE-2017-7760The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. The location of the original file can be altered by a malici…Mozilla · Firefox ESR · 2018-06-11 | – | 0.4% | 2018-06-11 |
| CVE-2018-6556The lxc-user-nic component of LXC allows unprivileged users to open arbitrary filesLinuxcontainers · LXC · 2018-08-10 | – | 0.4% | 2018-08-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.