Dead Code

The product contains dead code, which can never be executed.

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-44057 - - Jul 23, 2026 May 21, 2026 N/A· v4 3.1 LOW· v3 N/A· v2 A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authenticated attacker to o...Show more A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authenticated attacker to obtain limited information via crafted Spotlight RPC requests.Show less
CVE-2025-34205 1Vasion 2Virtual Appliance Application Virtual Appliance Host Jun 17, 2026 Sep 19, 2025 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contains dangerous PHP dead code present in multiple Docker-hosted PHP i...Show more Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/resetroot.php (found in several containers) lacks authentication checks and, when executed, performs a SQL update that sets the database administrator username to 'root' and its password hash to the SHA-512 hash of the string 'password'. Separately, commented-out code in /var/www/app/lib/common/oses.php would unserialize session data (unserialize($_SESSION['osdata']))—a pattern that can enable remote code execution if re-enabled or reached with attacker-controlled serialized data. An attacker able to reach the resetroot.php endpoint can trivially reset the MySQL root password and obtain full database control; combined with deserialization issues this can lead to full remote code execution and system compromise. This vulnerability has been identified by the vendor as: V-2023-003 — Dead / Insecure PHP Code.Show less
CVE-2024-8300 - - Jun 17, 2026 Nov 28, 2024 N/A· v4 7.0 HIGH· v3 N/A· v2 Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10...Show more Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, and Mitsubishi Electric Iconics Digital Solutions ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3 allows a local authenticated attacker to execute a malicious code by tampering with a specially crafted DLL. This could lead to disclose, tamper with, destroy, or delete information in the affected products, or cause a denial of service (DoS) condition on the products.Show less
CVE-2024-32634 1Asrmicro 13Asr1602 Firmware Asr1603 FirmwareAsr1605 Firmware+10 more Jun 17, 2026 Apr 16, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 In huge memory get unmapped area check, code can never be reached because of a logical contradiction.
CVE-2022-33726 1Google 1Android Jun 17, 2026 Aug 5, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity.
CVE-2022-33685 1Google 1Android Jun 17, 2026 Jul 12, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information.
CVE-2022-30748 1Samsung 1Members Jun 17, 2026 Jun 7, 2022 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity.
CVE-2021-25398 1Samsung 1Bixby Voice Jun 17, 2026 Jun 11, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts.
CVE-2018-0039 1Juniper 1Contrail Service Orchestration Nov 21, 2024 Jul 11, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to informati...Show more Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other weaknesses or vulnerabilities in Grafana.Show less