TYPE DE FAIBLESSE

CWE-388

13 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-388 (en anglais) →

CVE-2026-20168L'interface de gestion web de Cisco IoT Field Network Director contient une faille dans la manière dont elle valide les demandes d'accès aux fichiers. Un attaquant disposant d'iden… 6.5 MOYENNE

CVE-2026-20006Les systèmes Cisco Secure Firewall Threat Defense utilisant le moteur de détection Snort 3 sont vulnérables à une attaque par déni de service. Un attaquant distant non authentifié … 5.8 MOYENNE

CVE-2019-2237Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic gets executed everytime in Sna… 5.5 MOYENNE

CVE-2019-12380**DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolo… 5.5 MOYENNE

CVE-2018-0415A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Small… 6.8 MOYENNE

CVE-2018-10624In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communi… 4.3 MOYENNE

CVE-2015-9218In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD… 5.5 MOYENNE

CVE-2017-16644The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (improper error handling and sy… 6.6 MOYENNE

CVE-2017-7616Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from… 5.5 MOYENNE

CVE-2016-10062The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service (app… 5.5 MOYENNE

CVE-2017-5577The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections,… 5.5 MOYENNE

CVE-2016-9588arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which allows guest OS users to cause a denial of service (guest OS crash) by declining to … 5.5 MOYENNE

CVE-2006-6682Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fails, compared to a request with an invalid username, which allows remot… 5.0 MOYENNE