Advisories · Weakness
CWE-419.
Every Advisory and CVE whose sources give the weakness CWE-419, newest first.
- CVSS 2.2 Low
HCL BigFix IVR is impacted by an improper service binding configuration
- HCLSoftware BigFix IVR
- Information disclosure
- CWE-419
- CVSS 7.1 High
Envoy Admin Interface Exposed through prometheus metrics endpoint
- CWE-419
<1.2.6 · fixed in 1.2.6
GHSA-j777-63hf-hx76 · CVE-2025-24030 - CVSS 9.8 CriticalCritical · CVSS 9+
Unprotected Exposed Firebird Database with default credentials
- HASOMED Elefant
- CWE-419
- CWE-1393
- CVSS 3.7 Low
TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel.
- DREAM TRAIN INTERNET INC. TONE store App
- CWE-419
- CVSS 7.5 High
Z/IP Gateway Device Reset Locally Denial of Service Vulnerability
- silabs.com Z/IP Gateway SDK
- CWE-248
- CWE-419
- CVSS 8.8 High
Unprotected Primary Channel vulnerability in Movistar 4G router
- Router Movistar 4G
- CWE-419
- CVSS 6.5 Medium
Silicon Labs PC Controller Denial of Service Vulnerability
- silabs.com PC Controller
- CWE-248
- CWE-419
- CVSS 7.2 High
Spigot Command Exploit in Triton
- Triton
- CWE-419
- CVSS 5.3 Medium
Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6…
- Dell PowerScale OneFS
- CWE-419
- CVSS 6.5 Medium
Kubernetes kubelet exposes /debug/pprof info on healthz port
- Kubernetes
- CWE-419
-
Node.js: Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any…
- Node.js
- CWE-419
-
The Eclipse Foundation Eclipse OpenJ9: In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java…
- The Eclipse Foundation Eclipse OpenJ9
- CWE-419