# CWE-248.

Every Advisory and CVE whose sources give the weakness CWE-248, newest first.

## Records, newest first (an older page)

- [Linux kernel: There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the…](https://agentprime.io/advisories/CVE-2022-1975.md)
  `CVE-2022-1975` · CVE record: Linux kernel · No CVSS score · Not analysed yet · Published 31 Aug 2022 · Tags: CWE-248
- [Unexpected server crash in Next.js](https://agentprime.io/advisories/GHSA-wff4-fpwg-qqv3.md)
  `GHSA-wff4-fpwg-qqv3`, `CVE-2022-36046`, `PYSEC-2022-43188` · npm `next`: affected `>=12.2.3, <12.2.4`, fixed in `12.2.4` · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2022 · Tags: CWE-248, CWE-754
- [PocketMine-MP invalid skin geometry JSON data leading to server crash](https://agentprime.io/advisories/GHSA-8cwq-4cmf-px73.md)
  `GHSA-8cwq-4cmf-px73`, `CVE-2022-51009`, `PKSA-g2v4-vgph-zkgr` · Packagist `pocketmine/pocketmine-mp`: affected `<4.7.2`, fixed in `4.7.2` · CVSS 8.7 High · Not analysed yet · Published 18 Aug 2022 · Tags: CWE-248
- [Uncaught Exception (due to a data race) leads to process termination in Waitress](https://agentprime.io/advisories/GHSA-f5x9-8jwc-25rw.md)
  `GHSA-f5x9-8jwc-25rw`, `CVE-2022-31015`, `PYSEC-2022-205` · PyPI `waitress`: affected `>=2.1.0, <2.1.2`, fixed in `2.1.2` · CVSS 6.5 Medium · Not analysed yet · Published 2 Jun 2022 · Tags: Race condition, CWE-248
- [Camaleon CMS vulnerable to Uncaught Exception](https://agentprime.io/advisories/GHSA-r2w2-h6r8-3r53.md)
  `GHSA-r2w2-h6r8-3r53`, `CVE-2021-25971` · RubyGems `camaleon_cms`: affected `>=2.0.1, <2.6.0.1`, fixed in `2.6.0.1` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: CWE-248
- [Crash in HeaderParser in dicer](https://agentprime.io/advisories/GHSA-wm7h-9275-46v2.md)
  `GHSA-wm7h-9275-46v2`, `CVE-2022-24434` · Maven `org.webjars.npm:dicer` and 1 more: affected `<=0.3.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 21 May 2022 · Tags: CWE-248
- [Undertow Uncaught Exception vulnerability](https://agentprime.io/advisories/GHSA-3f57-w2rp-72fc.md)
  `GHSA-3f57-w2rp-72fc`, `CVE-2016-7046` · Maven `io.undertow:undertow-core`: affected `>=1.4.0, <1.4.3.Final || <1.3.25.Final`, fixed in `1.4.3.Final`, `1.3.25.Final` · CVSS 5.9 Medium · Not analysed yet · Published 17 May 2022 · Tags: CWE-248
- [Crash when decoding malformed HTTP requests or malformed JSON payload](https://agentprime.io/advisories/GHSA-95q3-pppp-r683.md)
  `GHSA-95q3-pppp-r683`, `CVE-2018-1330` · Maven `org.apache.mesos:mesos`: affected `>=1.4.0, <1.6.0`, fixed in `1.6.0` · CVSS 7.5 High · Not analysed yet · Published 14 May 2022 · Tags: CWE-248
- [Siemens Desigo DXR2: A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22)…](https://agentprime.io/advisories/CVE-2021-41545.md)
  `CVE-2021-41545` · CVE record: Siemens Desigo DXR2 and 3 more · No CVSS score · Not analysed yet · Published 10 May 2022 · Tags: CWE-248
- [Uncaught Exception in bignum](https://agentprime.io/advisories/GHSA-6429-3g3w-6mw5.md)
  `GHSA-6429-3g3w-6mw5`, `CVE-2022-25324` · npm `bignum`: affected `<=0.13.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 7 May 2022 · Tags: CWE-248
- [Denial-of-Service when binding invalid parameters in sqlite3](https://agentprime.io/advisories/GHSA-9qrh-qjmc-5w2p.md)
  `GHSA-9qrh-qjmc-5w2p`, `CVE-2022-21227` · npm `sqlite3`: affected `>=5.0.0, <5.0.3`, fixed in `5.0.3` · CVSS 7.5 High · Not analysed yet · Published 28 Apr 2022 · Tags: CWE-248
- [Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20761.md)
  `CVE-2022-20761` · CVE record: Cisco Cisco IOS · CVSS 7.4 High · Not analysed yet · Published 15 Apr 2022 · Tags: CWE-248
- [Denial of Service vulnerability in @podium/layout and @podium/proxy](https://agentprime.io/advisories/GHSA-3hjg-vc7r-rcrw.md)
  `GHSA-3hjg-vc7r-rcrw`, `CVE-2022-24822` · npm `@podium/layout` and 1 more: affected `<4.6.110`, fixed in `4.6.110` · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2022 · Tags: CWE-248
- [Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-20675.md)
  `CVE-2022-20675` · CVE record: Cisco Cisco Web Security Appliance (WSA) · CVSS 5.3 Medium · Not analysed yet · Published 6 Apr 2022 · Tags: CWE-248
- [AVEVA System Platform Uncaught Exception](https://agentprime.io/advisories/CVE-2021-33010.md)
  `CVE-2021-33010` · CVE record: AVEVA AVEVA System Platform · CVSS 7.5 High · Not analysed yet · Published 4 Apr 2022 · Tags: CWE-248
- [Uncaught Exception in zip4j](https://agentprime.io/advisories/GHSA-q62h-jw38-24vh.md)
  `GHSA-q62h-jw38-24vh`, `CVE-2022-24615` · Maven `net.lingala.zip4j:zip4j`: affected `<2.10.0`, fixed in `2.10.0` · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2022 · Tags: CWE-248, CWE-755
- [Unhandled exception when decoding form response JSON](https://agentprime.io/advisories/GHSA-wjfq-88q2-r34j.md)
  `GHSA-wjfq-88q2-r34j`, `CVE-2022-51014`, `PKSA-rk71-pq1c-y6tt` · Packagist `pocketmine/pocketmine-mp`: affected `>=4.0.0, <4.0.7`, fixed in `4.0.7` · CVSS 7.1 High · Not analysed yet · Published 21 Jan 2022 · Tags: CWE-248
- [DOS and Open Redirect with user input](https://agentprime.io/advisories/GHSA-pgh6-m65r-2rhq.md)
  `GHSA-pgh6-m65r-2rhq`, `CVE-2021-22964` · npm `fastify-static`: affected `>=4.2.4, <4.4.1`, fixed in `4.4.1` · CVSS 8.8 High · Not analysed yet · Published 12 Oct 2021 · Tags: Denial of service, Open redirect, CWE-248
- [Denial of Service in node-static](https://agentprime.io/advisories/GHSA-8r4g-cg4m-x23c.md)
  `GHSA-8r4g-cg4m-x23c` · npm `node-static`: affected `<=0.7.11`, no fixed version yet · No CVSS score · Not analysed yet · Published 22 Sept 2021 · Tags: Denial of service, CWE-248
- [Duplicate Advisory: Uncaught Exception in libpulse-binding](https://agentprime.io/advisories/GHSA-wcxc-jf6c-8rx9.md)
  `GHSA-wcxc-jf6c-8rx9`, `CVE-2019-25055`, `GHSA-xvcg-2q82-r87j`, `RUSTSEC-2019-0038` · crates.io `libpulse-binding`: affected `<2.6.0`, fixed in `2.6.0` · No CVSS score · Withdrawn · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-248
- [Uncaught Exception in jsoup](https://agentprime.io/advisories/GHSA-m72m-mhq2-9p6c.md)
  `GHSA-m72m-mhq2-9p6c`, `CVE-2021-37714` · Maven `org.jsoup:jsoup`: affected `<1.14.2`, fixed in `1.14.2` · CVSS 7.5 High · Not analysed yet · Published 23 Aug 2021 · Tags: Denial of service, CWE-248
- [Akaunting DoS via User-Controlled 'locale' Variable](https://agentprime.io/advisories/CVE-2021-36802.md)
  `CVE-2021-36802` · CVE record: Akaunting Akaunting · CVSS 6.5 Medium · Not analysed yet · Published 4 Aug 2021 · Tags: CWE-248
- [Malicious Android application can crash the Nextcloud Android Client](https://agentprime.io/advisories/CVE-2021-32694.md)
  `CVE-2021-32694` · CVE record: nextcloud security-advisories · CVSS 4.1 Medium · Not analysed yet · Published 17 Jun 2021 · Tags: CWE-248
- [Uncaught Exception leading to Denial of Service in json-sanitizer](https://agentprime.io/advisories/GHSA-8rf5-92jh-3vc9.md)
  `GHSA-8rf5-92jh-3vc9`, `CVE-2021-23900` · Maven `com.mikesamuel:json-sanitizer`: affected `<1.2.2`, fixed in `1.2.2` · CVSS 7.5 High · Not analysed yet · Published 13 May 2021 · Tags: CWE-248
- [GlobalProtect App: Windows VPN kernel driver denial of service (DoS)](https://agentprime.io/advisories/CVE-2021-3038.md)
  `CVE-2021-3038` · CVE record: Palo Alto Networks GlobalProtect App · CVSS 5.5 Medium · Not analysed yet · Published 20 Apr 2021 · Tags: CWE-20, CWE-248
- [A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl.](https://agentprime.io/advisories/CVE-2020-15796.md)
  `CVE-2020-15796` · CVE record: Siemens SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) and 1 more · No CVSS score · Not analysed yet · Published 14 Dec 2020 · Tags: CWE-248
- [Game Networking Sockets: Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined…](https://agentprime.io/advisories/CVE-2020-6019.md)
  `CVE-2020-6019` · CVE record: Game Networking Sockets · No CVSS score · Not analysed yet · Published 13 Nov 2020 · Tags: CWE-248
- [Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2020-27121.md)
  `CVE-2020-27121` · CVE record: Cisco Cisco Unified Communications Manager IM and Presence Service · CVSS 4.3 Medium · Not analysed yet · Published 6 Nov 2020 · Tags: CWE-248
- [Service DoS through arbitrary pointer dereferencing on KUKA simulator](https://agentprime.io/advisories/CVE-2020-10292.md)
  `CVE-2020-10292` · CVE record: KUKA Roboter GmbH Visual Components Network License Server 2.0.8 · CVSS 8.2 High · Not analysed yet · Published 6 Nov 2020 · Tags: CWE-248
- [AMQ: It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's…](https://agentprime.io/advisories/CVE-2020-14348.md)
  `CVE-2020-14348` · CVE record: AMQ · No CVSS score · Not analysed yet · Published 16 Sept 2020 · Tags: CWE-248
- [Denial of Service in sequelize](https://agentprime.io/advisories/GHSA-fw4p-36j9-rrj3.md)
  `GHSA-fw4p-36j9-rrj3` · npm `sequelize`: affected `<4.44.4`, fixed in `4.44.4` · No CVSS score · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-248
- [Denial of Service in mqtt](https://agentprime.io/advisories/GHSA-hg78-c92r-hvwr.md)
  `GHSA-hg78-c92r-hvwr`, `CVE-2016-1000242` · npm `mqtt`: affected `<1.0.0`, fixed in `1.0.0` · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2020 · Tags: CWE-248
- [OSIsoft PI System multiple products and versions: In OSIsoft PI System multiple products and versions, a remote…](https://agentprime.io/advisories/CVE-2020-10604.md)
  `CVE-2020-10604` · CVE record: OSIsoft PI System multiple products and versions · No CVSS score · Not analysed yet · Published 24 Jul 2020 · Tags: CWE-248
- [SonicWall SMA1000: A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated…](https://agentprime.io/advisories/CVE-2020-5129.md)
  `CVE-2020-5129` · CVE record: SonicWall SMA1000 · No CVSS score · Not analysed yet · Published 26 Mar 2020 · Tags: CWE-248
- [Schneider Electric SE Modicon M580: A CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior…](https://agentprime.io/advisories/CVE-2019-6828.md)
  `CVE-2019-6828` · CVE record: Schneider Electric SE Modicon M580 and 3 more · No CVSS score · Not analysed yet · Published 17 Sept 2019 · Tags: CWE-248
- [Schneider Electric SE Modicon M580: A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions…](https://agentprime.io/advisories/CVE-2019-6809.md)
  `CVE-2019-6809` · CVE record: Schneider Electric SE Modicon M580 and 3 more · No CVSS score · Not analysed yet · Published 17 Sept 2019 · Tags: CWE-248
- [Schneider Electric SE Modicon M580: A CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version…](https://agentprime.io/advisories/CVE-2019-6829.md)
  `CVE-2019-6829` · CVE record: Schneider Electric SE Modicon M580 and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2019 · Tags: CWE-248
- [Schneider Electric SE Modicon M580: A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to…](https://agentprime.io/advisories/CVE-2019-6830.md)
  `CVE-2019-6830` · CVE record: Schneider Electric SE Modicon M580 · No CVSS score · Not analysed yet · Published 17 Sept 2019 · Tags: CWE-248
- [Siemens AG All other SIPROTEC 5 device types with CPU…: A vulnerability has been identified in All other SIPROTEC 5 device types with CPU…](https://agentprime.io/advisories/CVE-2019-10931.md)
  `CVE-2019-10931` · CVE record: Siemens AG All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules and 4 more · No CVSS score · Not analysed yet · Published 11 Jul 2019 · Tags: CWE-248
- [A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when an invalid private…](https://agentprime.io/advisories/CVE-2018-7852.md)
  `CVE-2018-7852` · CVE record: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium · CVSS 7.5 High · Not analysed yet · Published 22 May 2019 · Tags: CWE-248
- [Siemens AG SIMATIC PCS 7 V8.0 and earlier: A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions)…](https://agentprime.io/advisories/CVE-2019-10917.md)
  `CVE-2019-10917` · CVE record: Siemens AG SIMATIC PCS 7 V8.0 and earlier and 4 more · No CVSS score · Not analysed yet · Published 14 May 2019 · Tags: CWE-248
- [Siemens SIMATIC CP 443-1 OPC UA: A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions)…](https://agentprime.io/advisories/CVE-2019-6575.md)
  `CVE-2019-6575` · CVE record: Siemens SIMATIC CP 443-1 OPC UA and 4 more · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2019 · Tags: CWE-248
- [SonicWall SonicOS: A vulnerability in SonicWall SonicOS and SonicOSv…](https://agentprime.io/advisories/CVE-2019-7474.md)
  `CVE-2019-7474` · CVE record: SonicWall SonicOS and 1 more · No CVSS score · Not analysed yet · Published 2 Apr 2019 · Tags: CWE-248
- [A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions…](https://agentprime.io/advisories/CVE-2018-11466.md)
  `CVE-2018-11466` · CVE record: Siemens AG SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 · No CVSS score · Not analysed yet · Published 12 Dec 2018 · Tags: CWE-248
- [A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions…](https://agentprime.io/advisories/CVE-2018-11465.md)
  `CVE-2018-11465` · CVE record: Siemens AG SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 · No CVSS score · Not analysed yet · Published 12 Dec 2018 · Tags: CWE-248
- [A vulnerability has been identified in SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3).](https://agentprime.io/advisories/CVE-2018-11464.md)
  `CVE-2018-11464` · CVE record: Siemens AG SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 · No CVSS score · Not analysed yet · Published 12 Dec 2018 · Tags: CWE-248
- [Elastic Logstash: Logstash versions prior to 2.3.3, when using the Netflow Codec plugin…](https://agentprime.io/advisories/CVE-2016-10363.md)
  `CVE-2016-10363` · CVE record: Elastic Logstash · No CVSS score · Not analysed yet · Published 16 Jun 2017 · Tags: CWE-248

Newest: <https://agentprime.io/advisories/tag/cwe-248.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-248&cursor=WyIyMDIyLTA5LTMwVDE4OjQ2OjM3LjQ4MTAwMFoiLCJDVkUtMjAyMi0yMDkxOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-248/?cursor=WyIyMDIyLTA5LTMwVDE4OjQ2OjM3LjQ4MTAwMFoiLCJDVkUtMjAyMi0yMDkxOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.