CWE-254

CVEs per yearBy the year they were published

1. 20001
2. 20031
3. 20062
4. 20082
5. 20111
6. 20146
7. 201595
8. 2016170
9. 201784
10. 201822
11. 201928
12. 20222

Newest CVEs

• CVE-2021-43177

  As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one…

  Tinfoil · devise-two-factor

  Medium5.3
• CVE-2021-40006

  Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality.

  Huawei · HarmonyOS

  Medium4.6
• CVE-2019-10059

  The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.

  Product not named

  Medium5.3
• CVE-2016-10933

  An issue was discovered in the portaudio crate through 0.7.0 for Rust. There is a man-in-the-middle issue because the source code is downloaded over cleartext…

  Product not named

  Medium5.9
• CVE-2016-10932

  An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification…

  Product not named

  Medium4.8
• CVE-2015-9331

  The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.

  Product not named

  High7.5
• CVE-2015-9318

  The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.

  Product not named

  High7.5
• CVE-2019-15149

  core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another…

  Product not named

  Critical9.8
• CVE-2016-10894

  xtrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked screen can send input to (and thus control) various programs such…

  Product not named

  Medium4.6
• CVE-2016-10772

  cPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang adminbin (SEC-168).

  Product not named

  Low3.3

Vendors it comes up for most

1. Oracle7
2. IBM Corporation5
3. Qualcomm, Inc.5
4. Mozilla4
5. Yandex N.V.3
6. Google Inc.2
7. HackerOne2
8. IBM2
9. Intel2
10. Beckhoff1