CWE-1104.

Use of End-of-Life components in mH-DEVELOPER

• F&F Filipowski mH-DEVELOPER
• CWE-1104

HCL Hive is affected by multiple security vulnerabilities.

• HCL Software Hive
• CWE-1104

HP Easy Start for macOS - Security Update

• HP Inc HP Easy Start for macOS
• CWE-1104

HCL Hive is affected by a use of vulnerable third-party components

• HCLSoftware HCL Hive
• CWE-1104

Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label

• Red Hat Advanced Cluster Management for Kubernetes 2.16
• Red Hat Advanced Cluster Management for Kubernetes 2.17
• CWE-1104

cloudflare/pages-action is deprecated — migration required by September 18th, 2026

• https://github.com/cloudflare/pages-action
• Command injection
• CWE-1104

TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99

• FELIPE TOML::XS
• CWE-1104
• CWE-1395

Oracle Corporation Oracle Platform Security for Java: Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion…

• Oracle Corporation Oracle Platform Security for Java
• CWE-1104

HCL MyCloud was affected by Using Components with Known Vulnerability

• HCLSoftware MyCloud
• CWE-1104

Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library

• TOKUHIROM Image::EPEG
• CWE-1104

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service

• HCLSoftware Traveler for Microsoft Outlook
• CWE-1104

HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery

• HCLSoftware BigFix SCM Reporting
• CWE-1104

Beghelli Sicuro24 SicuroWeb AngularJS Sandbox Escape via Template Injection

• Beghelli SicuroWeb (Sicuro24)
• CWE-1104

HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability

• HCL Aftermarket DPC
• CWE-1104

Intel(R) Processor Identification Utility: Use of unmaintained third party components for some Intel(R) Processor Identification…

• Intel(R) Processor Identification Utility
• CWE-1104

Incorrect Content-Type Header

• Azure Access Technology BLU-IC2
• Azure Access Technology BLU-IC4
• CWE-1104

HCL MyXalytics is affected by the use of vulnerable/outdated versions

• HCL Software MyXalytics
• CWE-1021
• CWE-1104

Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• CWE-755
• CWE-1104

Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• CWE-1104

Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4

• AxxonSoft AxxonOne C-Werk
• CWE-1104

Missing encryption of sensitive data in Bosch Rexroth AG ctrlX OS - Setup

• Bosch Rexroth AG ctrlX OS - Setup
• Weak cryptography or TLS
• CWE-1104

Radiflow iSAP Smart Collector Linux distribution unmaintained

• Radiflow iSAP Smart Collector
• CWE-1104

BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities

• MONGODB BSON::XS
• Memory corruption
• CWE-1104

CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into HMI product.

• Schneider Electric Harmony (Formerly Magelis) HMIST6, HMISTM6, HMIG3U, HMIG3X, HMISTO7 series with EcoStruxure Operator Terminal Expert runtime
• Schneider Electric PFXST6000, PFXSTM6000, PFXSP5000, PFXGP4100 series with Pro-face BLUE runtime
• CWE-1104

Deserialization of untrusted data in Sophos Intercept X

• Sophos Intercept X
• Insecure deserialization
• CWE-1104

Azure Storage Movement Client Library Denial of Service Vulnerability

• CWE-1104

<2.0.5 · fixed in 2.0.5

Integer overflow in URI leading to potential host spoofing

• vapor
• Memory corruption
• CWE-20

Remote Code Execution (RCE) Vulnerability

• Barracuda Networks Inc. Barracuda ESG Appliance
• CWE-1104

Kibana Reporting vulnerabilities

• Elastic Kibana
• CWE-1104

An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited.

• Mozilla Firefox
• CWE-1104

typemap is Unmaintained

• CWE-1104

* · no fixed version yet

traitobject is Unmaintained

• CWE-1104

* · no fixed version yet

Outdated Static Dependency in vue-moment

• CWE-1104

<4.1.0 · fixed in 4.1.0