CWE-477 Use of Obsolete Function
baseThe code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (20)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-17890US | critical9.8 | — | ||
NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arbitrary code execution. | ||||
| CVE-2023-23451US | critical9.8OT elevated | — | ||
The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial… | ||||
| CVE-2019-18251US | high8.8 | — | ||
In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete function… | ||||
| CVE-2023-28829US | high8.8 | — | ||
A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0… | ||||
| CVE-2022-1384US | high8.8OT elevated | — | ||
Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Marketplace, which allows an authenticated and an authorized use… | ||||
| CVE-2022-23718US | high8.1 | — | ||
PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution. An attacker capable of achieving a sophisticated man-in-the-middle positi… | ||||
| CVE-2019-11769US | high7.8 | — | ||
An issue was discovered in TeamViewer 14.2.2558. Updating the product as a non-administrative user requires entering administrative credentials into the GUI. Subsequently, these cr… | ||||
| CVE-2026-1693US | high7.5 | — | ||
The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in v… | ||||
| CVE-2007-2583US | medium4.0 | Exploit | ||
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a cr… | ||||
| CVE-2020-6978US | high7.2 | — | ||
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries. | ||||
| CVE-2025-39910US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()
kasan_populate_vmalloc() and its helpers ig… | ||||
| CVE-2019-10968US | medium4.4 | — | ||
Philips Holter 2010 Plus, all versions. A vulnerability has been identified that may allow system options that were not purchased to be enabled. | ||||
| CVE-2019-10988US | low3.4 | — | ||
In Philips HDI 4000 Ultrasound Systems, all versions running on old, unsupported operating systems such as Windows 2000, the HDI 4000 Ultrasound System is built on an old operating… | ||||
| CVE-2025-49213US | — | — | ||
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note t… | ||||
| CVE-2025-49212US | — | — | ||
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note t… | ||||
| CVE-2025-49220US | — | — | ||
An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note th… | ||||
| CVE-2025-49217US | — | — | ||
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note t… | ||||
| CVE-2025-49216US | — | — | ||
An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configu… | ||||
| CVE-2025-49214US | — | — | ||
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations.
Pl… | ||||
| CVE-2025-49219US | — | — | ||
An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note t… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan