Weaknesses of type CWE-20

4,596 results
CVE-2021-44355HIGHMultiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121EPSS 1.7%CVE-2021-32795MEDIUMDenial of Service via Steam chat in ArchiSteamFarmEPSS 1.7%CVE-2019-6555—Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may EPSS 1.7%CVE-2020-27125HIGHCisco Security Manager Static Credential VulnerabilityEPSS 1.7%CVE-2017-6021—In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build 76.5648) and prior, EPSS 1.7%CVE-2017-12148HIGHA flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition dEPSS 1.7%CVE-2024-37965HIGHMicrosoft SQL Server Elevation of Privilege VulnerabilityEPSS 1.7%CVE-2023-36021HIGHMicrosoft On-Prem Data Gateway Security Feature Bypass VulnerabilityEPSS 1.7%CVE-2019-1720MEDIUMCisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Service VulnerabilityEPSS 1.7%CVE-2021-37150MEDIUMProtocol vs scheme mismatchEPSS 1.7%CVE-2019-1844MEDIUMCisco Email Security Appliance Filter Bypass VulnerabilityEPSS 1.7%CVE-2017-6770—Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 througEPSS 1.7%CVE-2020-15168LOWFile size limit bypass in node-fetchEPSS 1.7%CVE-2020-26291MEDIUMHostname spoofing in URI.jsEPSS 1.7%CVE-2022-31778—Transfer-Encoding not treated as hop-by-hopEPSS 1.7%CVE-2021-3572—A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue tEPSS 1.7%CVE-2023-32321CRITICALCKAN remote code execution and private information access via crafted resource idsEPSS 1.7%CVE-2019-1787HIGHClam AntiVirus PDF Denial of Service VulnerabilityEPSS 1.7%CVE-2022-31020HIGHRemote code execution in Indy's NODE_UPGRADE transactionEPSS 1.7%CVE-2021-25434—Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using EPSS 1.7%