ATT vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2022-26507 A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7.Critical 9.8 · Apr 14, 2022
• CVE-2021-21811 A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xmill 0.7.Critical 9.8 · Aug 31, 2021
• CVE-2021-21828 A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7.Critical 9.8 · Aug 20, 2021
• CVE-2021-21827 A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7.Critical 9.8 · Aug 20, 2021
• CVE-2021-21826 A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7.Critical 9.8 · Aug 20, 2021
• CVE-2021-21825 A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7.Critical 9.8 · Aug 18, 2021
• CVE-2021-21810 A memory corruption vulnerability exists in the XML-parsing ParseAttribs functionality of AT&T Labs’ Xmill 0.7.Critical 9.8 · Aug 17, 2021
• CVE-2021-21815 A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7.High 7.8 · Aug 13, 2021
• CVE-2021-21814 Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line.High 7.8 · Aug 13, 2021
• CVE-2021-21813 Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line.High 7.8 · Aug 13, 2021
• CVE-2021-21812 A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’ Xmill 0.7.High 7.8 · Aug 13, 2021
• CVE-2021-21830 A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmill 0.7.Critical 9.8 · Aug 13, 2021
• CVE-2021-21829 A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Labs’ Xmill 0.7.Critical 9.8 · Aug 13, 2021
• CVE-2020-22650 A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service (DOS) via a system crash triggered by the occurrence of a largeHigh 7.5 · Jul 19, 2021
• CVE-2013-7286 MobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithmHigh 7.5 · Feb 12, 2020
• CVE-2017-14116 The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with tHigh 8.1 · Sep 3, 2017
• CVE-2017-14115 The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logiHigh 8.1 · Sep 3, 2017
• CVE-2017-10793 The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha WAHigh 8.1 · Sep 3, 2017
• CVE-2012-2980 The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTHigh 7.1 · Aug 21, 2012
• CVE-2001-0167 Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFaHigh 7.6 · May 3, 2001
• CVE-2001-0168 Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET High 10 · May 3, 2001
• CVE-2001-1422 WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing thHigh 7.5 · Jan 23, 2001
• CVE-2000-1164 WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modiHigh 9 · Jan 9, 2001