# CWE-130.

Every Advisory and CVE whose sources give the weakness CWE-130, newest first.

## Records, newest first (an older page)

- [Ovn: ovn: information disclosure via crafted dhcpv6 packets](https://agentprime.io/advisories/CVE-2026-5367.md)
  `CVE-2026-5367` · CVE record: Red Hat Fast Datapath for Red Hat Enterprise Linux 10 and 4 more · CVSS 8.6 High · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-130
- [rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer](https://agentprime.io/advisories/GHSA-hppc-g8h3-xhp3.md)
  `GHSA-hppc-g8h3-xhp3`, `CVE-2026-41898` · crates.io `openssl`: affected `>=0.9.24, <0.10.78`, fixed in `0.10.78` · CVSS 8.3 High · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-126, CWE-130
- [Samba rsync: In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a…](https://agentprime.io/advisories/CVE-2026-41035.md)
  `CVE-2026-41035` · CVE record: Samba rsync · CVSS 7.4 High · Not analysed yet · Published 16 Apr 2026 · Tags: Memory corruption, CWE-130
- [An issue was discovered in HAProxy before 3.3.6.](https://agentprime.io/advisories/CVE-2026-33555.md)
  `CVE-2026-33555` · CVE record: HAProxy HAProxy · CVSS 4.0 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: CWE-130
- [Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass](https://agentprime.io/advisories/CVE-2026-40199.md)
  `CVE-2026-40199` · CVE record: STIGTSP Net::CIDR::Lite · CVSS 6.5 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-130
- [Rack has Content-Length mismatch in Rack::Files error responses](https://agentprime.io/advisories/GHSA-q2ww-5357-x388.md)
  `GHSA-q2ww-5357-x388`, `CVE-2026-34831` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 4.8 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-130, CWE-135
- [python-ecdsa: Denial of Service via improper DER length validation in crafted private keys](https://agentprime.io/advisories/GHSA-9f5j-8jwj-x28g.md)
  `GHSA-9f5j-8jwj-x28g`, `CVE-2026-33936`, `PYSEC-2026-2467` · PyPI `ecdsa`: affected `<0.19.2`, fixed in `0.19.2` · CVSS 5.3 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-20, CWE-130
- [Out of bounds read in IMAP parsing](https://agentprime.io/advisories/CVE-2026-4371.md)
  `CVE-2026-4371` · CVE record: Mozilla Thunderbird · CVSS 7.4 High · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-126, CWE-130
- [A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).](https://agentprime.io/advisories/CVE-2026-25572.md)
  `CVE-2026-25572` · CVE record: Siemens SICAM SIAPP SDK · CVSS 5.9 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-130
- [A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).](https://agentprime.io/advisories/CVE-2026-25571.md)
  `CVE-2026-25571` · CVE record: Siemens SICAM SIAPP SDK · CVSS 5.9 Medium · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-130
- [Yokogawa Electric Corporation Vnet/IP Interface Package: A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric…](https://agentprime.io/advisories/CVE-2025-48022.md)
  `CVE-2025-48022` · CVE record: Yokogawa Electric Corporation Vnet/IP Interface Package · CVSS 6.0 Medium · Not analysed yet · Published 13 Feb 2026 · Tags: CWE-130
- [iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp](https://agentprime.io/advisories/CVE-2026-22861.md)
  `CVE-2026-22861` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption, CWE-130, CWE-252
- [iccDEV has heap-buffer-overflow in CIccCLUT::Init() at IccProfLib/IccTagLut.cpp](https://agentprime.io/advisories/CVE-2026-22255.md)
  `CVE-2026-22255` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 8 Jan 2026 · Tags: CWE-20, CWE-130, CWE-252
- [iccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp](https://agentprime.io/advisories/CVE-2026-22047.md)
  `CVE-2026-22047` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 7 Jan 2026 · Tags: CWE-20, CWE-130, CWE-252
- [iccDEV has heap-buffer-overflow in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp](https://agentprime.io/advisories/CVE-2026-22046.md)
  `CVE-2026-22046` · CVE record: InternationalColorConsortium iccDEV · CVSS 8.8 High · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption, CWE-20, CWE-130, CWE-252
- [Zlib compressed protocol header length confusion may allow memory read](https://agentprime.io/advisories/CVE-2025-14847.md)
  `CVE-2025-14847` · CVE record: MongoDB Inc. MongoDB Server · CVSS 8.7 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.83 · Not analysed yet · Published 19 Dec 2025 · Tags: CWE-130
- [Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU: Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric…](https://agentprime.io/advisories/CVE-2025-8531.md)
  `CVE-2025-8531` · CVE record: Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 19 Sept 2025 · Tags: CWE-130
- [Bluetooth: le_conn_rsp does not sanitize CID, MTU, MPS values](https://agentprime.io/advisories/CVE-2025-10458.md)
  `CVE-2025-10458` · CVE record: zephyrproject-rtos Zephyr · CVSS 7.6 High · Not analysed yet · Published 19 Sept 2025 · Tags: CWE-130
- [In multiple locations, there is a possible way to persistently DoS the device due to a missing length check.](https://agentprime.io/advisories/CVE-2025-26432.md)
  `CVE-2025-26432` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-130
- [Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module](https://agentprime.io/advisories/CVE-2025-5514.md)
  `CVE-2025-5514` · CVE record: Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2025 · Tags: CWE-130
- [Vulnerability of inadequate packet length check in the BLE module.](https://agentprime.io/advisories/CVE-2025-54646.md)
  `CVE-2025-54646` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-130
- [Duplicate Advisory: Remotely exploitable denial of service in Rosenpass](https://agentprime.io/advisories/GHSA-624c-2h52-gf7f.md)
  `GHSA-624c-2h52-gf7f` · crates.io `rosenpass`: affected `<0.2.1`, fixed in `0.2.1` · CVSS 5.3 Medium · Withdrawn · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-130
- [Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash](https://agentprime.io/advisories/CVE-2025-52949.md)
  `CVE-2025-52949` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-130
- [Rust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header](https://agentprime.io/advisories/GHSA-287x-9rff-qvcg.md)
  `GHSA-287x-9rff-qvcg`, `CVE-2025-53604`, `GHSA-fc83-9jwq-gc2m`, `RUSTSEC-2025-0015` · crates.io `web-push`: affected `<0.10.4`, fixed in `0.10.4` · CVSS 4.0 Medium · Not analysed yet · Published 5 Jul 2025 · Tags: CWE-130
- [NVIDIA CUDA Toolkit: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary…](https://agentprime.io/advisories/CVE-2025-23247.md)
  `CVE-2025-23247` · CVE record: NVIDIA NVIDIA CUDA Toolkit · CVSS 4.4 Medium · Not analysed yet · Published 27 May 2025 · Tags: CWE-130
- [NamelessMC Has Lack of Length Validation for s Parameter in GET Requests](https://agentprime.io/advisories/CVE-2025-29784.md)
  `CVE-2025-29784` · CVE record: NamelessMC Nameless · CVSS 7.5 High · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-20, CWE-130, CWE-1284
- [A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).](https://agentprime.io/advisories/CVE-2025-29931.md)
  `CVE-2025-29931` · CVE record: Siemens TeleControl Server Basic · CVSS 6.3 Medium · Not analysed yet · Published 17 Apr 2025 · Tags: CWE-130
- [Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic](https://agentprime.io/advisories/CVE-2025-30659.md)
  `CVE-2025-30659` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-130
- [ConnMan: In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length that depends on an RR…](https://agentprime.io/advisories/CVE-2025-32366.md)
  `CVE-2025-32366` · CVE record: ConnMan ConnMan · CVSS 4.8 Medium · Not analysed yet · Published 5 Apr 2025 · Tags: CWE-130
- [Panics on Malformed Untrusted Input](https://agentprime.io/advisories/GHSA-9rmp-2568-59rv.md)
  `GHSA-9rmp-2568-59rv`, `CVE-2024-53856`, `RUSTSEC-2024-0447` · crates.io `pgp`: affected `>=0.0.0-0, <0.14.1`, fixed in `0.14.1` · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2024 · Tags: Denial of service, CWE-130, CWE-148
- [Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2024-47293.md)
  `CVE-2024-47293` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Sept 2024 · Tags: CWE-130
- [An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-servi...](https://agentprime.io/advisories/GHSA-r836-hh6v-rg5g.md)
  `GHSA-r836-hh6v-rg5g`, `BIT-django-2024-41991`, `CVE-2024-41991`, `PYSEC-2024-69` · PyPI `django`: affected `>=4.2, <4.2.15 || >=5.0, <5.0.8`, fixed in `4.2.15`, `5.0.8` · CVSS 7.5 High · Not analysed yet · Published 7 Aug 2024 · Tags: CWE-130
- [An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs w...](https://agentprime.io/advisories/GHSA-795c-9xpc-xw6g.md)
  `GHSA-795c-9xpc-xw6g`, `BIT-django-2024-41990`, `CVE-2024-41990`, `PYSEC-2024-68` · PyPI `django`: affected `>=4.2, <4.2.15 || >=5.0, <5.0.8`, fixed in `4.2.15`, `5.0.8` · CVSS 7.5 High · Not analysed yet · Published 7 Aug 2024 · Tags: CWE-130
- [Elliptic's ECDSA missing check for whether leading bit of r and s is zero](https://agentprime.io/advisories/GHSA-977x-g7h5-7qgw.md)
  `GHSA-977x-g7h5-7qgw`, `CVE-2024-42460` · npm `elliptic`: affected `>=2.0.0, <6.5.7`, fixed in `6.5.7` · CVSS 5.3 Medium · Not analysed yet · Published 2 Aug 2024 · Tags: CWE-130
- [A vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device.](https://agentprime.io/advisories/CVE-2024-20416.md)
  `CVE-2024-20416` · CVE record: Cisco Cisco Small Business RV Series Router Firmware · CVSS 6.5 Medium · Not analysed yet · Published 17 Jul 2024 · Tags: CWE-130
- [Django vulnerable to Denial of Service](https://agentprime.io/advisories/GHSA-qg2p-9jwr-mmqf.md)
  `GHSA-qg2p-9jwr-mmqf`, `BIT-django-2024-38875`, `CVE-2024-38875`, `PYSEC-2024-56` · PyPI `django`: affected `>=4.2, <4.2.14 || >=5.0, <5.0.7`, fixed in `4.2.14`, `5.0.7` · CVSS 7.5 High · Not analysed yet · Published 10 Jul 2024 · Tags: Denial of service, CWE-130
- [Django vulnerable to Denial of Service](https://agentprime.io/advisories/GHSA-f6f8-9mx6-9mx2.md)
  `GHSA-f6f8-9mx6-9mx2`, `BIT-django-2024-39614`, `CVE-2024-39614`, `PYSEC-2024-59` · PyPI `django`: affected `>=4.2, <4.2.14 || >=5.0, <5.0.7`, fixed in `4.2.14`, `5.0.7` · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.29 · Not analysed yet · Published 10 Jul 2024 · Tags: Denial of service, CWE-130
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-38011.md)
  `CVE-2024-38011` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.0 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-130
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-38010.md)
  `CVE-2024-38010` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.0 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-130
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-37989.md)
  `CVE-2024-37989` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.0 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-130
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-37988.md)
  `CVE-2024-37988` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.0 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-130
- [Buffer overflow in deserialization in oqs-provider](https://agentprime.io/advisories/CVE-2024-37305.md)
  `CVE-2024-37305` · CVE record: open-quantum-safe oqs-provider · CVSS 8.2 High · Not analysed yet · Published 17 Jun 2024 · Tags: Memory corruption, CWE-130
- [Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26.](https://agentprime.io/advisories/CVE-2023-52547.md)
  `CVE-2023-52547` · CVE record: Huawei CurieM-WFG9B · CVSS 7.8 High · Not analysed yet · Published 28 May 2024 · Tags: CWE-130
- [Tor path lengths too short when "Vanguards lite" configured](https://agentprime.io/advisories/GHSA-9328-gcfq-p269.md)
  `GHSA-9328-gcfq-p269`, `CVE-2024-35312`, `CVE-2024-35313`, `GHSA-c96h-cxx6-rmg9`, `RUSTSEC-2024-0339`, `RUSTSEC-2024-0340`, `TROVE-2024-003`, `TROVE-2024-004` · crates.io `tor-circmgr`: affected `>=0.18.0, <0.18.1`, fixed in `0.18.1` · CVSS 6.2 Medium · Not analysed yet · Published 15 May 2024 · Tags: CWE-130, CWE-670
- [Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution.](https://agentprime.io/advisories/CVE-2023-5393.md)
  `CVE-2023-5393` · CVE record: Honeywell Experion Server · CVSS 7.4 High · Not analysed yet · Published 11 Apr 2024 · Tags: CWE-130
- [Azure Private 5G Core Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20685.md)
  `CVE-2024-20685` · CVE record: Microsoft Azure Private 5G Core · CVSS 5.9 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-130
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-29064.md)
  `CVE-2024-29064` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-130
- [Open Automation Software OAS Platform: A denial of service vulnerability exists in the OAS Engine File Data Source Configuration…](https://agentprime.io/advisories/CVE-2024-24976.md)
  `CVE-2024-24976` · CVE record: Open Automation Software OAS Platform · CVSS 4.9 Medium · Not analysed yet · Published 3 Apr 2024 · Tags: CWE-130
- [Out of memory error when submitting the dataset form with a specially-crafted field](https://agentprime.io/advisories/GHSA-7fgc-89cx-w8j5.md)
  `GHSA-7fgc-89cx-w8j5`, `CVE-2023-50248`, `PYSEC-2026-1249` · PyPI `ckan`: affected `>=2.0, <2.9.10 || >=2.10.0, <2.10.3`, fixed in `2.9.10`, `2.10.3` · CVSS 4.5 Medium · Not analysed yet · Published 13 Dec 2023 · Tags: CWE-130
- [Remotely exploitable DoS condition in Rosenpass <=0.2.0](https://agentprime.io/advisories/GHSA-6ggr-cwv4-g7qg.md)
  `GHSA-6ggr-cwv4-g7qg`, `CVE-2023-53157`, `RUSTSEC-2023-0077` · crates.io `rosenpass`: affected `>=0.0.0-0, <0.2.1`, fixed in `0.2.1` · CVSS 5.3 Medium · Not analysed yet · Published 4 Nov 2023 · Tags: CWE-130
- [Jetty accepts "+" prefixed value in Content-Length](https://agentprime.io/advisories/GHSA-hmr7-m48g-48f6.md)
  `GHSA-hmr7-m48g-48f6`, `CVE-2023-40167` · Maven `org.eclipse.jetty:jetty-http`: affected `>=9.0.0, <9.4.52 || >=10.0.0, <10.0.16 || >=11.0.0, <11.0.16 || >=12.0.0, <12.0.1`, fixed in `9.4.52`, `10.0.16`, `11.0.16`, `12.0.1` · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2023 · Tags: CWE-130
- [Improper handling of NTS cookie length that could crash the ntpd-rs server](https://agentprime.io/advisories/GHSA-qwhm-h7v3-mrjx.md)
  `GHSA-qwhm-h7v3-mrjx`, `CVE-2023-33192` · crates.io `ntpd`: affected `>=0.3.0, <0.3.3`, fixed in `0.3.3` · CVSS 7.5 High · Not analysed yet · Published 25 May 2023 · Tags: CWE-130
- [libslic3r: A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality…](https://agentprime.io/advisories/CVE-2022-36788.md)
  `CVE-2022-36788` · CVE record: Slic3r libslic3r · CVSS 8.1 High · Not analysed yet · Published 20 Apr 2023 · Tags: CWE-130
- [Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash](https://agentprime.io/advisories/CVE-2023-28964.md)
  `CVE-2023-28964` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-130
- [Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Disco…](https://agentprime.io/advisories/CVE-2022-20690.md)
  `CVE-2022-20690` · CVE record: Cisco Cisco Analog Telephone Adaptor (ATA) Software · CVSS 5.3 Medium · Not analysed yet · Published 7 Dec 2022 · Tags: CWE-130
- [Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Disco…](https://agentprime.io/advisories/CVE-2022-20689.md)
  `CVE-2022-20689` · CVE record: Cisco Cisco Analog Telephone Adaptor (ATA) Software · CVSS 5.3 Medium · Not analysed yet · Published 7 Dec 2022 · Tags: CWE-130
- [Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute…](https://agentprime.io/advisories/CVE-2022-20686.md)
  `CVE-2022-20686` · CVE record: Cisco Cisco Analog Telephone Adaptor (ATA) Software · CVSS 5.3 Medium · Not analysed yet · Published 7 Dec 2022 · Tags: CWE-130
- [The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidentiality.](https://agentprime.io/advisories/CVE-2022-41586.md)
  `CVE-2022-41586` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2022 · Tags: CWE-130
- [Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20870.md)
  `CVE-2022-20870` · CVE record: Cisco Cisco IOS XE Software · CVSS 8.6 High · Not analysed yet · Published 10 Oct 2022 · Tags: CWE-130
- [L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translation](https://agentprime.io/advisories/CVE-2021-27862.md)
  `CVE-2021-27862` · CVE record: IEEE 802.2 and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 27 Sept 2022 · Tags: Authentication bypass, CWE-130

Newest: <https://agentprime.io/advisories/tag/cwe-130.md>
Older: <https://agentprime.io/advisories/tag/cwe-130.md?cursor=WyIyMDIyLTA5LTI3VDE4OjQwOjE0LjcxMjAwMFoiLCJDVkUtMjAyMS0yNzg2MiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-130&cursor=WyIyMDI2LTA0LTI0VDEyOjI1OjA2LjgwODAwMFoiLCJDVkUtMjAyNi01MjY1Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-130/?cursor=WyIyMDI2LTA0LTI0VDEyOjI1OjA2LjgwODAwMFoiLCJDVkUtMjAyNi01MjY1Il0>. Everything for agents: <https://agentprime.io/llms.txt>.