CWE-399
2,694 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 11 of them as exploited in the wild.
- Published CVEs
- 2,694
- Last 12 months
- 1
- Critical
- 9
- Known exploited
- 11
Critical 9High 1,289Medium 1,299Low 97Not scored 0
CVEs per yearBy the year they were published
- 2015352
- 2016173
- 2017115
- 201858
- 201929
- 202013
- 202113
- 202215
- 20233
- 20244
- 20251
- 20261
Known exploitedNewest addition to KEV first
- CVE-2010-0806
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute…
Product not named
ExploitedHigh8.8 - CVE-2018-0154
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated,…
Cisco IOS
ExploitedHigh7.5 - CVE-2018-0156
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a…
Cisco IOS and IOS XE
ExploitedHigh7.5 - CVE-2018-0161
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could…
Cisco IOS
ExploitedMedium6.3 - CVE-2018-0179
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a…
Cisco IOS
ExploitedMedium6.8 - CVE-2018-0180
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a…
Cisco IOS
ExploitedMedium6.8 - CVE-2017-12231
A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote…
Cisco IOS
ExploitedHigh7.5 - CVE-2017-12232
A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6…
Cisco IOS
ExploitedMedium6.5 - CVE-2017-12237
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an…
Cisco IOS and IOS XE
ExploitedHigh7.5 - CVE-2017-12238
A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an…
Cisco IOS
ExploitedMedium6.5
Newest CVEs
- CVE-2026-41983
Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.
Huawei · HarmonyOS
Medium4.3 - CVE-2024-58113
Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability.
Huawei · HarmonyOS
Medium5.3 - CVE-2024-20407
A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could…
Cisco · Cisco Firepower Threat Defense Software
Medium5.8 - CVE-2024-20467
A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to…
Cisco · Cisco IOS XE Software
High8.6 - CVE-2023-29267
IBM Db2 denial of service
IBM · Db2 for Linux, UNIX and Windows
Medium5.3 - CVE-2022-43855
IBM SPSS Statistics denial of service
IBM · SPSS Statistics
Medium6.2 - CVE-2023-20262
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a…
Cisco · Cisco SD-WAN Solution
Medium5.3 - CVE-2023-20243
A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the…
Cisco · Cisco Identity Services Engine Software
High8.6 - CVE-2023-20014
A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
Cisco · Cisco Nexus Dashboard
High7.5 - CVE-2022-43380
IBM AIX denial of service
IBM · AIX
Medium6.2