CWE-241.

Kong API Gateway Enterprise: JWT Algorithm-Confusion

• Kong Enteprise Gateway
• CWE-241

HPE IceWall Federation Agent and Proxy, Denial of Service vulnerability

• Hewlett Packard Enterprise HPE IceWall products
• CWE-241

Tiptap contains an input validation vulnerability resulting in DoS

• CWE-241

<2.1.1 · fixed in 2.1.1

An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to bear a non-valid value in any Boolean field.

• CWE-241

Nextcloud Calendar attachments of local files are offered to downloaded

• nextcloud security-advisories
• CWE-241

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially…

• AMD Instinct™ MI300X
• CWE-241

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service proces…

• AMD Instinct™ MI300X
• CWE-241

on-headers is vulnerable to http response header manipulation

• CWE-241

<1.1.0 · fixed in 1.1.0

HP LaserJet MFP M232-M237 Printer Series - Potential Denial of Service

• HP Inc. HP LaserJet MFP M232-M237 Printer Series
• CWE-241

Certain HP LaserJet Pro Printers – Potential Denial of Service

• HP Inc. Certain HP LaserJet Pro Printers
• CWE-241

Certain HP LaserJet Printers – Potential Denial of Service

• HP Inc. Certain HP LaserJet Printers
• CWE-241

speaker vulnerable to Denial of Service

• Denial of service
• CWE-241

<=0.5.5 · no fixed version yet

images vulnerable to Denial of Service

• Denial of service
• CWE-241

<=3.2.4 · no fixed version yet

Nextcloud Calendar's event create can create attachments that link to other websites

• nextcloud security-advisories
• CWE-241

Dell PowerScale OneFS: Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an improper handling of…

• Dell PowerScale OneFS
• CWE-241

An issue in Tuya Smart camera U6N v.3.2.5 allows a remote attacker to cause a denial of service via a crafted packet to the network connection component.

• CWE-241

Arm v8-M Security Extensions Requirements on Development…: Insufficient argument checking in Secure state Entry functions in software using Cortex-M…

• Arm v8-M Security Extensions Requirements on Development Tools
• CWE-241

NodeBB Pre-Authentication Denial-of-Service

• NodeBB
• CWE-241

Libnbd: crash or misbehaviour when nbd server returns an unexpected block size

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 8
• CWE-241

Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is used

• Juniper Networks Junos OS
• CWE-241

Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-241

A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control.

• Ikea TRÅDFRI gateway system
• CWE-241

An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple times, the bulb performs a factory reset.

• Ikea TRÅDFRI smart lighting system
• CWE-241

NLnet Labs Routinator has Reachable Assertion vulnerability

• Denial of service
• CWE-241

>=0.9.0, <0.11.3 · fixed in 0.11.3

Incorrect type conversion in Swift Project Swift Corelib-Foundation

• Swift Project Swift Corelib-Foundation
• CWE-241
• CWE-351

Nokogiri Improperly Handles Unexpected Data Type

• Memory corruption
• CWE-241

<1.13.6 · fixed in 1.13.6

Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability

• Cisco Firepower Threat Defense Software
• CWE-241

Junos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command is executed the rpd process might crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-241

Unhandled case in node-lmdb

• CWE-241
• CWE-703

<0.9.7 · fixed in 0.9.7

A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames.

• Swift Project SwiftNIO HTTP2
• CWE-241

Multiple Cisco Products Snort Rule Denial of Service Vulnerability

• Cisco Firepower Threat Defense Software
• CWE-241

Improper Handling of Unexpected Data Type in ced

• CWE-241

<1.0.0 · fixed in 1.0.0

Passing in a non-string 'html' argument can lead to unsanitized output

• Cross-site scripting (XSS)
• Memory corruption

<3.2.0 · fixed in 3.2.0

Files Drop public link can be added as federated share

• nextcloud security-advisories
• CWE-241

Junos OS: EX4300: Stateless firewall policer fails to discard traffic

• Juniper Networks Junos OS
• CWE-241

Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured

• Juniper Networks Junos OS
• Memory corruption
• CWE-241