Use of Obsolete Function

The code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.

CVEs (16)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-1693 2Arcinfo Arcinformatique 2Pcvue Pcvue Jul 9, 2026 Feb 26, 2026 5.3 MEDIUM· v4 7.5 HIGH· v3 N/A· v2 The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in version 12.0.0 through 16.3.3 included de...Show more The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue features of PcVue in version 12.0.0 through 16.3.3 included despite being deprecated. It might allow a remote attacker to steal user credentials.Show less
CVE-2025-49217 1Trendmicro 1Trend Micro Endpoint Encryption Jun 17, 2026 Jun 17, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE...Show more An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49213 but is in a different method.Show less
CVE-2025-49216 1Trendmicro 1Trend Micro Endpoint Encryption Jun 17, 2026 Jun 17, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.
CVE-2025-49214 1Trendmicro 1Trend Micro Endpoint Encryption Jun 17, 2026 Jun 17, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations. Please note: an attacker must first obtain...Show more An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.Show less
CVE-2025-49213 1Trendmicro 1Trend Micro Endpoint Encryption Jun 17, 2026 Jun 17, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE...Show more An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49212 but is in a different method.Show less
CVE-2025-49212 1Trendmicro 1Trend Micro Endpoint Encryption Jun 17, 2026 Jun 17, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE...Show more An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.Show less
CVE-2025-49220 1Trendmicro 1Apex Central Jun 17, 2026 Jun 17, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-...Show more An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49219 but is in a different method.Show less
CVE-2025-49219 1Trendmicro 1Apex Central Jun 17, 2026 Jun 17, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE...Show more An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.Show less
CVE-2023-28829 1Siemens 4Simatic Net Pc Software Simatic Pcs 7Simatic Wincc+1 more Jun 17, 2026 Jun 13, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All...Show more A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC WinCC (All versions < V8.0), SINAUT Software ST7sc (All versions). Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement state-of-the-art security mechanisms for authentication and encryption of contents.Show less
CVE-2023-23451 1Sick 10Fx0 Gent00000 Firmware Fx0 Gent00030 FirmwareFx0 Gmod00000 Firmware+7 more Jun 17, 2026 Apr 19, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions...Show more The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN4 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK FX0-GENT00000 FLEXISOFT EIP GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GMOD00000 FLEXISOFT MOD GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GPNT00000 FLEXISOFT PNET GATEW. with serial number <=2311xxxx with Firmware <=V2.12.0, SICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 with serial number <=2311xxxx all Firmware versions, SICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 with serial number <=2311xxxx all Firmware versions and SICK FX0-GMOD00010 FLEXISOFT MOD GW with serial number <=2311xxxx with Firmware <=V2.11.0 all have Telnet enabled by factory default. No password is set in the default configuration.Show less
CVE-2022-1384 1Mattermost 1Mattermost Server Jun 17, 2026 Apr 19, 2022 N/A· v4 8.8 HIGH· v3 6.0 MEDIUM· v2 Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Marketplace, which allows an authenticated and an authorized user to install and exploit an old plugin v...Show more Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Marketplace, which allows an authenticated and an authorized user to install and exploit an old plugin version from the Marketplace which might have known vulnerabilities.Show less
CVE-2020-6978 1Honeywell 1Win Pak Jun 17, 2026 Mar 24, 2020 N/A· v4 7.2 HIGH· v3 6.4 MEDIUM· v2 In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries.
CVE-2019-18251 2Omron Teamviewer 2Cx Supervisor Teamviewer Jun 17, 2026 Nov 26, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete function vulnerability requiring user interactio...Show more In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete function vulnerability requiring user interaction to exploit.Show less
CVE-2019-10988 1Philips 1Hdi 4000 Firmware Jun 17, 2026 Sep 4, 2019 N/A· v4 3.4 LOW· v3 3.6 LOW· v2 In Philips HDI 4000 Ultrasound Systems, all versions running on old, unsupported operating systems such as Windows 2000, the HDI 4000 Ultrasound System is built on an old operating system that is no longer supported. Thu...Show more In Philips HDI 4000 Ultrasound Systems, all versions running on old, unsupported operating systems such as Windows 2000, the HDI 4000 Ultrasound System is built on an old operating system that is no longer supported. Thus, any unmitigated vulnerability in the old operating system could be exploited to affect this product.Show less
CVE-2019-10968 1Philips 1Zymed Holter 2010 Jun 17, 2026 Jul 24, 2019 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 Philips Holter 2010 Plus, all versions. A vulnerability has been identified that may allow system options that were not purchased to be enabled.
CVE-2018-17890 1Nuuo 1Nuuo Cms Nov 21, 2024 Oct 12, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arbitrary code execution.