Advisories · Weakness
CWE-460.
Every Advisory and CVE whose sources give the weakness CWE-460, newest first.
- CVSS 8.2 High
HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit
- CWE-460
>=1.9.0, <1.14.0 · fixed in 1.14.0
GHSA-2238-pgfc-w82m · CVE-2026-111103 - CVSS 3.1 Low
Improper Cleanup on Thrown Exception in GitLab
- GitLab
- CWE-460
- CVSS 6.8 Medium
Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB
- NationalSecurityAgency ghidra
- CWE-460
- CWE-667
- CVSS 7.5 High
Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks
- CWE-460
- CVSS 6.9 Medium
Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive
- grokability snipe-it
- CWE-460
- CVSS 6.9 Medium
Resource leak in Eclipse Foundation Eclipse Milo
- Eclipse Foundation Eclipse Milo
- Denial of service
- CWE-460
- CVSS 3.7 Low
PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)
- CWE-460
- CWE-755
>=2.0.0, <2.13.0 · fixed in 2.13.0
GHSA-fhv5-28vv-h8m8 · CVE-2026-48524 - CVSS 8.8 High
UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt
- UltraDAGcom core
- CWE-460
- CWE-696
- CVSS 5.3 Medium
Syft improper temporary file cleanup
- CWE-460
<1.42.3 · fixed in 1.42.3
GHSA-rjcw-vg7j-m9rc · CVE-2026-33481 - CVSS 6.8 Medium
Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-460
- CVSS 6.2 Medium
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information.
- CWE-460
- CVSS 3.1 Low
EVerest libocpp: libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary…
- EVerest libocpp
- CWE-460
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Apache Tomcat Denial of Service via invalid HTTP priority header
- CWE-459
- CWE-460
>=9.0.76, <9.0.104 || >=10.1.10, <10.1.40 || >=11.0.0-M2, <11.0.6 || >=8.5.0, <=8.5.100 · fixed in 9.0.104, 10.1.40, 11.0.6
GHSA-3p2h-wqq4-wf4h · CVE-2025-31650 - CVSS 8.7 High
tRPC 11 WebSocket DoS Vulnerability
- CWE-248
- CWE-460
>=11.0.0, <11.1.1 · fixed in 11.1.1
GHSA-pj3v-9cm8-gvj8 · CVE-2025-43855 - CVSS 6.5 Medium
Pleezer resource exhaustion through uncollected hook script processes
- Denial of service
- CWE-460
<0.16.0 · fixed in 0.16.0
GHSA-472w-7w45-g3w5 · CVE-2025-32439 - CVSS 6.5 Medium
Envoy crashes when HTTP ext_proc processes local replies
- CWE-460
<1.30.10 || >=1.31.0, <1.31.6 || >=1.32.0, <1.32.4 || >=1.33.0, <1.33.1 · fixed in 1.30.10, 1.31.6, 1.32.4, 1.33.1
GHSA-cf3q-gqg7-3fm9 · CVE-2025-30157 - CVSS 5.9 Medium
Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service in github.com/hashicorp/boundary
- CWE-460
<0.18.2 · fixed in 0.18.2
GHSA-xx83-cxmq-x89m · CVE-2024-12289 - CVSS 4.7 Medium
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition…
- Cisco Aironet Access Point Software
- Cisco Aironet Access Point Software (IOS XE Controller)
- CWE-460
- CVSS 6.8 Medium
Improper cleanup vulnerability in FireEye Endpoint Security
- FireEye Endpoint Security
- CWE-460
-
gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.
- CWE-460
- CVSS 7.8 High
Kernel: A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in…
- Kernel
- CWE-460
- CVSS 5.5 Medium
A double-free memory flaw was found in the Linux kernel.
- kernel
- CWE-460
- CVSS 4.3 Medium
Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.
- CWE-460
<2.4.8 · fixed in 2.4.8
GHSA-qq29-5vjh-vxwr · CVE-2022-3301 - CVSS 8.8 High
Foxit: A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF…
- Foxit
- CWE-460
- CVSS 5.5 Medium
ordered_float:NotNan may contain NaN after panic in assignment operators
- CWE-460
>=0.2.2, <1.1.1 || >=2.0.0, <2.0.1 · fixed in 1.1.1, 2.0.1
GHSA-566x-hhrf-qf8m · CVE-2020-35923 - CVSS 6.7 Medium
Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability
- Cisco TelePresence Video Communication Server (VCS) Expressway
- CWE-460
- CVSS 4.4 Medium
kernel: A memory disclosure flaw was found in the Linux kernel's ethernet drivers…
- kernel
- CWE-460
- CVSS 5.0 Medium
cri-o: A flaw was found in cri-o, as a result of all pod-related processes being placed in the…
- cri-o
- CWE-460
-
Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible.
- Philips IntelliVue MX40 Patient Worn Monitor
- CWE-460
- CVSS 4.3 Medium
openshift: openshift before versions 3.3.1.11, 3.2.1.23…
- openshift
- CWE-460
-
Linux kernel before 4.13: A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux…
- Linux kernel before 4.13
- CWE-460