# CWE-244. Every Advisory and CVE whose sources give the weakness CWE-244, newest first. ## Records, newest first - [IBM Concert Software Improper Clearing of Heap Memory](https://agentprime.io/advisories/CVE-2026-1510.md) `CVE-2026-1510` · CVE record: IBM Concert · CVSS 4.7 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-244 - [Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20349.md) `CVE-2026-20349` · CVE record: Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-244 - [nebula-mesh: Decrypted CA private key persists in heap after signing](https://agentprime.io/advisories/GHSA-8h84-fhqq-q58v.md) `GHSA-8h84-fhqq-q58v`, `CVE-2026-48025`, `GO-2026-5255` · Go `github.com/forgekeep/nebula-mesh` and 1 more: affected `<0.3.7`, fixed in `0.3.7` · CVSS 6.9 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-244 - [An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.](https://agentprime.io/advisories/CVE-2025-70873.md) `CVE-2025-70873` · CVE record · CVSS 7.5 High · Not analysed yet · Published 12 Mar 2026 · Tags: CWE-244 - [Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20039.md) `CVE-2026-20039` · CVE record: Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-244 - [Multiple Vulnerabilities in IBM Concert Software.](https://agentprime.io/advisories/CVE-2025-33101.md) `CVE-2025-33101` · CVE record: IBM Concert · CVSS 5.9 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: CWE-244 - [Multiple Vulnerabilities in IBM Concert Software](https://agentprime.io/advisories/CVE-2025-1722.md) `CVE-2025-1722` · CVE record: IBM Concert · CVSS 5.9 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: CWE-244 - [Multiple Vulnerabilities in IBM Concert Software](https://agentprime.io/advisories/CVE-2025-1719.md) `CVE-2025-1719` · CVE record: IBM Concert · CVSS 5.9 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: CWE-244 - [BM Concert Software Improper Clearing of Heap Memory Before Release.](https://agentprime.io/advisories/CVE-2025-1721.md) `CVE-2025-1721` · CVE record: IBM Concert · CVSS 5.9 Medium · Not analysed yet · Published 26 Dec 2025 · Tags: CWE-244 - [IBM Storage Virtualize Information Disclosure](https://agentprime.io/advisories/CVE-2025-36118.md) `CVE-2025-36118` · CVE record: IBM Storage Virtualize · CVSS 7.5 High · Not analysed yet · Published 17 Nov 2025 · Tags: CWE-244 - [An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.](https://agentprime.io/advisories/CVE-2025-45663.md) `CVE-2025-45663` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2025 · Tags: CWE-244 - [Multiple Vulnerabilities in IBM Concert Software.](https://agentprime.io/advisories/CVE-2025-36083.md) `CVE-2025-36083` · CVE record: IBM Concert Software · CVSS 6.2 Medium · Not analysed yet · Published 28 Oct 2025 · Tags: CWE-244 - [IBM Concert Software information disclosure](https://agentprime.io/advisories/CVE-2025-1759.md) `CVE-2025-1759` · CVE record: IBM Concert Software · CVSS 5.9 Medium · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-244 - [IBM MQ Operator information disclosure](https://agentprime.io/advisories/CVE-2025-33013.md) `CVE-2025-33013` · CVE record: IBM MQ Operator · CVSS 6.2 Medium · Not analysed yet · Published 24 Jul 2025 · Tags: CWE-244 - [TOZED ZLT W51 Service Port 7777 heap inspection](https://agentprime.io/advisories/CVE-2025-5105.md) `CVE-2025-5105` · CVE record: TOZED ZLT W51 · CVSS 6.9 Medium · Not analysed yet · Published 23 May 2025 · Tags: CWE-244 - [A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.](https://agentprime.io/advisories/CVE-2025-26305.md) `CVE-2025-26305` · CVE record · CVSS 8.2 High · Not analysed yet · Published 20 Feb 2025 · Tags: CWE-244 - [A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.](https://agentprime.io/advisories/CVE-2025-26304.md) `CVE-2025-26304` · CVE record · CVSS 8.2 High · Not analysed yet · Published 20 Feb 2025 · Tags: CWE-244 - [A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedl…](https://agentprime.io/advisories/CVE-2023-20070.md) `CVE-2023-20070` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.0 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-244 - [A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause…](https://agentprime.io/advisories/CVE-2023-20031.md) `CVE-2023-20031` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.0 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-244 - [A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category and the Snort 3 detect…](https://agentprime.io/advisories/CVE-2023-20177.md) `CVE-2023-20177` · CVE record: Cisco Cisco Firepower Threat Defense Software · CVSS 4.0 Medium · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-244 - [Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the…](https://agentprime.io/advisories/CVE-2022-20943.md) `CVE-2022-20943` · CVE record: Cisco Cisco Firepower Threat Defense Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: CWE-244 - [Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the…](https://agentprime.io/advisories/CVE-2022-20922.md) `CVE-2022-20922` · CVE record: Cisco Cisco Firepower Threat Defense Software and 2 more · CVSS 5.8 Medium · Not analysed yet · Published 10 Nov 2022 · Tags: CWE-244 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .