Advisories · Weakness
CWE-477.
Every Advisory and CVE whose sources give the weakness CWE-477, newest first.
- CVSS 5.3 Medium
Use of vulnerable Resource Owner Password Credentials flow
- arcinfo PcVue
- Authentication bypass
- CWE-477
- CVSS 9.8 CriticalCritical · CVSS 9+
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations.
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-477
- CVSS 9.8 CriticalCritical · CVSS 9+
An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected…
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-477
- CVSS 8.8 High
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations.
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-477
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations.
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-477
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations.
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-477
- CVSS 9.8 CriticalCritical · CVSS 9+
Trend Micro, Inc. Trend Micro Apex Central: An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007…
- Trend Micro, Inc. Trend Micro Apex Central
- CWE-477
- CVSS 9.8 CriticalCritical · CVSS 9+
Trend Micro, Inc. Trend Micro Apex Central: An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007…
- Trend Micro, Inc. Trend Micro Apex Central
- CWE-477
- CVSS 4.7 Medium
Insecure plugin handling in Mattermost in github.com/mattermost/mattermost-server
- CWE-477
* · no fixed version yet
GHSA-32rp-q37p-jg6w · CVE-2022-1384 - CVSS 3.9 Low
Siemens SIMATIC NET PC Software V14: A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions)…
- Siemens SIMATIC NET PC Software V14
- Siemens SIMATIC NET PC Software V15
- CWE-477
- CVSS 9.8 CriticalCritical · CVSS 9+
The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx…
- SICK FX0-GENT00000, SICK FX0-GENT00030, SICK FX0-GMOD00000, SICK FX0-GMOD00010, SICK FX0-GPNT00000, SICK FX0-GPNT00030, SICK UE410-EN1, SICK UE410-EN3, SICK UE410-EN3S04, SICK UE410-EN4
- CWE-477
-
Honeywell WIN-PAK 4.7.2, Web and prior versions: In Honeywell WIN-PAK 4.7.2, Web and prior versions…
- Honeywell WIN-PAK 4.7.2, Web and prior versions
- CWE-477
-
Omron CX-Supervisor: In Omron CX-Supervisor, Versions 3.5 (12) and prior…
- Omron CX-Supervisor
- CWE-477
-
Philips HDI 4000 Ultrasound Systems: In Philips HDI 4000 Ultrasound Systems, all versions running on old…
- Philips HDI 4000 Ultrasound Systems
- CWE-477
-
Philips Holter 2010 Plus, all versions.
- Philips Holter 2010 Plus
- CWE-477
-
NUUO CMS: NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software…
- NUUO CMS
- CWE-477