Advisories · Weakness
CWE-229.
Every Advisory and CVE whose sources give the weakness CWE-229, newest first.
- CVSS 8.4 High
Local denial-of-service
- Zscaler Client Connector
- CWE-229
- CVSS 8.8 High
Local and kernel denial-of-service
- Zscaler Client Connector
- CWE-229
- CVSS 4.5 Medium
Intel(R) Processors: Improper handling of values for some Intel(R) Processors within Ring 0: Kernel…
- Intel(R) Processors
- CWE-229
- CVSS 9.1 CriticalCritical · CVSS 9+
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-229
- CWE-349
- CVSS 7.5 High
Improper input validation in Open-Xchange GmbH OX Dovecot Pro
- Open-Xchange GmbH OX Dovecot Pro
- CWE-20
- CWE-229
- CVSS 7.3 High
Math Issue in No-Chicken/Echo-Mate
- No-Chicken Echo-Mate
- CWE-229
- CVSS 1.8 Low
Intel(R) Processor Family may allow an escalation of…: Improper handling of values in the microcode flow for some Intel(R) Processor Family may…
- Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.
- CWE-229
- CVSS 9.2 CriticalCritical · CVSS 9+
Zigbee Router Denial of Service
- silabs.com Silicon Labs Zigbee Stack
- CWE-229
- CVSS 5.8 Medium
Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-229
- CVSS 5.8 Medium
A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access control policy.
- Cisco Firepower Threat Defense Software
- CWE-229
- CVSS 9.8 CriticalCritical · CVSS 9+
sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos
- CWE-229
<0.9.1 · fixed in 0.9.1
GHSA-42q2-m54f-jh95 · CVE-2022-4851 - CVSS 8.7 High
Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols
- Juniper Networks Junos OS Evolved
- CWE-229
- CVSS 7.5 High
Improper input validation in OneFlow-Inc.
- CWE-20
- CWE-229
- CVSS 5.6 Medium
PX4 Autopilot v.1.14 allows an attacker to fly the drone into no-fly zones by breaching the geofence using flaws in the function.
- CWE-229
- CVSS 5.5 Medium
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information via a crafted history_depth parameter in D…
- Information disclosure
- CWE-229
- CVSS 6.6 Medium
An issue in PX4 Autopilot v.1.14.0 allows an attacker to manipulate the flight path allowing for crashes of the drone via the home point location of the mission_block.cpp component.
- CWE-229
- CVSS 6.6 Medium
Kernel: nf_tables: pointer math issue in nft_byteorder_eval()
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- CWE-229
- CVSS 8.2 High
Unauthenticated out of bounds stack write in bmcweb
- OpenBMC
- Memory corruption
- CWE-229
- CVSS 8.2 High
Unauthenticated out of bounds heap write in bmcweb
- OpenBMC
- Memory corruption
- CWE-229
- CVSS 7.5 High
Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability.
- Dell PowerScale OneFS
- CWE-229
- CVSS 7.5 High
Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit.
- Dell PowerScale OneFS
- CWE-229