# CWE-755. Every Advisory and CVE whose sources give the weakness CWE-755, newest first. ## Records, newest first (an older page) - [Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations](https://agentprime.io/advisories/GHSA-29wx-vh33-7x7r.md) `GHSA-29wx-vh33-7x7r`, `CVE-2024-51744`, `GO-2024-3250` · Go `github.com/golang-jwt/jwt/v4`: affected `<4.5.1`, fixed in `4.5.1` · CVSS 3.1 Low · Not analysed yet · Published 4 Nov 2024 · Tags: Weak cryptography or TLS, CWE-755 - [loona-hpack Panic Vulnerability](https://agentprime.io/advisories/GHSA-7vm6-qwh5-9x44.md) `GHSA-7vm6-qwh5-9x44`, `CVE-2024-51502` · crates.io `loona-hpack`: affected `<0.4.3`, fixed in `0.4.3` · CVSS 5.1 Medium · Not analysed yet · Published 4 Nov 2024 · Tags: CWE-754, CWE-755 - [Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash](https://agentprime.io/advisories/CVE-2024-47491.md) `CVE-2024-47491` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-755 - [Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE](https://agentprime.io/advisories/CVE-2024-47489.md) `CVE-2024-47489` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization](https://agentprime.io/advisories/CVE-2024-39547.md) `CVE-2024-39547` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-755 - [Memory leak](https://agentprime.io/advisories/CVE-2024-8376.md) `CVE-2024-8376` · CVE record: Eclipse Foundation Mosquitto · CVSS 7.2 High · Not analysed yet · Published 11 Oct 2024 · Tags: Denial of service, Memory corruption, CWE-755 - [Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets](https://agentprime.io/advisories/CVE-2024-39526.md) `CVE-2024-39526` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash](https://agentprime.io/advisories/CVE-2024-39525.md) `CVE-2024-39525` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2024 · Tags: CWE-755 - [Remotely exploitable Denial of Service in Tonic](https://agentprime.io/advisories/GHSA-4jwc-w2hc-78qv.md) `GHSA-4jwc-w2hc-78qv`, `CVE-2024-47609`, `RUSTSEC-2024-0376` · crates.io `tonic`: affected `>=0.12.2, <0.12.3`, fixed in `0.12.3` · CVSS 6.9 Medium · Not analysed yet · Published 1 Oct 2024 · Tags: CWE-755 - [WatchGuard Firebox Single Sign-On Client Denial-of-Service](https://agentprime.io/advisories/CVE-2024-6594.md) `CVE-2024-6594` · CVE record: WatchGuard SSO Client · CVSS 8.7 High · Not analysed yet · Published 25 Sept 2024 · Tags: CWE-755 - [Device crash via malformed MQTT packet when downlink is enabled in Meshtastic device firmware](https://agentprime.io/advisories/CVE-2024-45038.md) `CVE-2024-45038` · CVE record: meshtastic firmware · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2024 · Tags: CWE-755 - [Improper handling of exceptional conditions in NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series…](https://agentprime.io/advisories/CVE-2024-0108.md) `CVE-2024-0108` · CVE record: NVIDIA NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX, Jetson TX1, Jetson Nano series · CVSS 8.7 High · Not analysed yet · Published 8 Aug 2024 · Tags: CWE-755 - [Improper handling of exceptional conditions in Mozilla Firefox and others](https://agentprime.io/advisories/CVE-2024-7521.md) `CVE-2024-7521` · CVE record: Mozilla Firefox and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash](https://agentprime.io/advisories/CVE-2024-39552.md) `CVE-2024-39552` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash](https://agentprime.io/advisories/CVE-2024-39541.md) `CVE-2024-39541` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash](https://agentprime.io/advisories/CVE-2024-39560.md) `CVE-2024-39560` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset](https://agentprime.io/advisories/CVE-2024-39555.md) `CVE-2024-39555` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-755 - [Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to](https://agentprime.io/advisories/GHSA-w9mh-5x8j-9754.md) `GHSA-w9mh-5x8j-9754`, `CVE-2024-39691` · npm `matrix-appservice-irc`: affected `<2.0.1`, fixed in `2.0.1` · CVSS 4.3 Medium · Not analysed yet · Published 5 Jul 2024 · Tags: CWE-280, CWE-755 - [Apache Tomcat - Denial of Service](https://agentprime.io/advisories/GHSA-wm9w-rjj3-j356.md) `GHSA-wm9w-rjj3-j356`, `BIT-tomcat-2024-34750`, `CVE-2024-34750` · Maven `org.apache.tomcat.embed:tomcat-embed-core` and 1 more: affected `>=11.0.0-M1, <11.0.0-M21 || >=10.1.0-M1, <10.1.25 || >=9.0.0-M1, <9.0.90 || >=8.5.0, <=8.5.100`, fixed in `11.0.0-M21`, `10.1.25`, `9.0.90` · CVSS 7.5 High · Not analysed yet · Published 3 Jul 2024 · Tags: Denial of service, CWE-755 - [Improper input validation in OneFlow-Inc.](https://agentprime.io/advisories/CVE-2024-36730.md) `CVE-2024-36730` · CVE record · CVSS 7.5 High · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-755 - [Privilege Escalation in mintplex-labs/anything-llm](https://agentprime.io/advisories/CVE-2024-3150.md) `CVE-2024-3150` · CVE record: mintplex-labs mintplex-labs/anything-llm · CVSS 8.1 High · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-755 - [An issue was discovered on Mercusys MW325R EU V3 MW325R(EU)\_V3_1.11.0 221019 devices.](https://agentprime.io/advisories/CVE-2023-46297.md) `CVE-2023-46297` · CVE record · CVSS 5.1 Medium · Not analysed yet · Published 29 May 2024 · Tags: CWE-755 - [Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records (\`extras.view_dynamicgroup\` permission) can use the Dynamic Group detail...](https://agentprime.io/advisories/GHSA-qmjf-wc2h-6x3q.md) `GHSA-qmjf-wc2h-6x3q`, `CVE-2024-36112`, `PYSEC-2024-166` · PyPI `nautobot`: affected `>=2.0.0, <2.3.0b1`, fixed in `2.3.0b1` · CVSS 6.3 Medium · Not analysed yet · Published 28 May 2024 · Tags: CWE-280, CWE-755 - [D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-50212.md) `CVE-2023-50212` · CVE record: D-Link G416 · CVSS 4.3 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-755 - [@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed](https://agentprime.io/advisories/GHSA-hgxw-5xg3-69jx.md) `GHSA-hgxw-5xg3-69jx`, `CVE-2024-32652` · npm `@hono/node-server`: affected `>=1.3.0, <1.10.1`, fixed in `1.10.1` · CVSS 7.5 High · Not analysed yet · Published 19 Apr 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV](https://agentprime.io/advisories/CVE-2024-30380.md) `CVE-2024-30380` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 16 Apr 2024 · Tags: CWE-755 - [Traefik vulnerable to denial of service with Content-length header](https://agentprime.io/advisories/GHSA-4vwx-54mw-vqfw.md) `GHSA-4vwx-54mw-vqfw`, `CVE-2024-28869`, `GO-2024-2722` · Go `github.com/traefik/traefik` and 2 more: affected `<2.11.2`, fixed in `2.11.2` · CVSS 7.5 High · Not analysed yet · Published 12 Apr 2024 · Tags: Denial of service, CWE-755 - [Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured](https://agentprime.io/advisories/CVE-2024-30382.md) `CVE-2024-30382` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-755 - [Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck](https://agentprime.io/advisories/CVE-2024-21610.md) `CVE-2024-21610` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-755 - [Matrix IRC Bridge truncated content of messages can be leaked](https://agentprime.io/advisories/GHSA-wm4w-7h2q-3pf7.md) `GHSA-wm4w-7h2q-3pf7`, `CVE-2024-32000` · npm `matrix-appservice-irc`: affected `<2.0.0`, fixed in `2.0.0` · CVSS 4.3 Medium · Not analysed yet · Published 11 Apr 2024 · Tags: CWE-280, CWE-755 - [SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used](https://agentprime.io/advisories/GHSA-j85q-46hg-36p2.md) `GHSA-j85q-46hg-36p2`, `CVE-2024-32001`, `GO-2024-2716` · Go `github.com/authzed/spicedb`: affected `<1.30.1`, fixed in `1.30.1` · CVSS 2.2 Low · Not analysed yet · Published 10 Apr 2024 · Tags: CWE-755 - [JFrog Artifactory Sensitive Data Leakage in Repository configuration process](https://agentprime.io/advisories/CVE-2023-42509.md) `CVE-2023-42509` · CVE record: JFrog Artifactory · CVSS 6.6 Medium · Not analysed yet · Published 7 Mar 2024 · Tags: CWE-755 - [Protocol Downgrade in Comarch ERP XL](https://agentprime.io/advisories/CVE-2023-4537.md) `CVE-2023-4537` · CVE record: Comarch ERP XL · CVSS 7.4 High · Not analysed yet · Published 15 Feb 2024 · Tags: CWE-755 - [Envoy crashes when using an address type that isn’t supported by the OS](https://agentprime.io/advisories/CVE-2024-23325.md) `CVE-2024-23325` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2024 · Tags: CWE-248, CWE-755 - [Quarkus Improper Handling of Insufficient Permissions or Privileges and Improper Handling of Exceptional Conditions vulnerability](https://agentprime.io/advisories/GHSA-8j3x-w35r-rw4r.md) `GHSA-8j3x-w35r-rw4r`, `CVE-2023-6267` · Maven `io.quarkus.resteasy.reactive:resteasy-reactive`: affected `<2.13.9.Final || >=3.0.0.Final, <3.2.9.Final`, fixed in `2.13.9.Final`, `3.2.9.Final` · CVSS 8.6 High · Not analysed yet · Published 25 Jan 2024 · Tags: Insecure deserialization, CWE-280, CWE-755 - [An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a denial of service.](https://agentprime.io/advisories/CVE-2021-42145.md) `CVE-2021-42145` · CVE record · CVSS 7.5 High · Not analysed yet · Published 24 Jan 2024 · Tags: CWE-755 - [An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30.](https://agentprime.io/advisories/CVE-2021-42141.md) `CVE-2021-42141` · CVE record · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2024 · Tags: CWE-755 - [Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled](https://agentprime.io/advisories/CVE-2024-21587.md) `CVE-2024-21587` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash](https://agentprime.io/advisories/CVE-2024-21585.md) `CVE-2024-21585` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-755 - [An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10.](https://agentprime.io/advisories/CVE-2022-48619.md) `CVE-2022-48619` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-755 - [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-20699.md) `CVE-2024-20699` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-755 - [Duplicate Advisory: Improper Handling of Exceptional Conditions in Newtonsoft.Json](https://agentprime.io/advisories/GHSA-8rfx-6mr3-5jh3.md) `GHSA-8rfx-6mr3-5jh3` · NuGet `Newtonsoft.Json`: affected `<13.0.1`, fixed in `13.0.1` · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 3 Jan 2024 · Tags: CWE-755 - [ReVanced API vulnerable to Denial of Service due to lack of error caching](https://agentprime.io/advisories/CVE-2023-52075.md) `CVE-2023-52075` · CVE record: ReVanced revanced-api · CVSS 7.5 High · Not analysed yet · Published 27 Dec 2023 · Tags: CWE-755 - [Unauthenticated Denial of Service in the octokit/webhooks library](https://agentprime.io/advisories/GHSA-pwfr-8pq7-x9qv.md) `GHSA-pwfr-8pq7-x9qv`, `CVE-2023-50728` · npm `octokit` and 3 more: affected `<3.1.2`, fixed in `3.1.2` · CVSS 5.4 Medium · Not analysed yet · Published 16 Dec 2023 · Tags: CWE-755 - [Denial of Service Vulnerability in Some ZTE Mobile Internet Products](https://agentprime.io/advisories/CVE-2023-25644.md) `CVE-2023-25644` · CVE record: ZTE MC801A and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Dec 2023 · Tags: CWE-755 - [Microweber missing standardized error handling mechanism](https://agentprime.io/advisories/GHSA-9r6p-hg4g-5gxp.md) `GHSA-9r6p-hg4g-5gxp`, `CVE-2023-6599`, `PKSA-3c1q-3392-wkmp` · Packagist `microweber/microweber`: affected `<2.0.0`, fixed in `2.0.0` · CVSS 3.1 Low · Not analysed yet · Published 8 Dec 2023 · Tags: CWE-544, CWE-755 - [Elasticsearch Improper Handling of Exceptional Conditions](https://agentprime.io/advisories/GHSA-285m-vhfq-xx4h.md) `GHSA-285m-vhfq-xx4h`, `BIT-elasticsearch-2023-46673`, `CVE-2023-46673` · Maven `org.elasticsearch:elasticsearch`: affected `>=7.0.0, <7.17.14 || >=8.0.0, <8.10.3`, fixed in `7.17.14`, `8.10.3` · CVSS 6.5 Medium · Not analysed yet · Published 22 Nov 2023 · Tags: CWE-755 - [Floating point Exception in adjust_plines_for_skipcol() in vim](https://agentprime.io/advisories/CVE-2023-48232.md) `CVE-2023-48232` · CVE record: vim vim · CVSS 3.9 Low · Not analysed yet · Published 16 Nov 2023 · Tags: CWE-755 - [Calico Typha denial of service vulnerability](https://agentprime.io/advisories/GHSA-5r5h-q934-cccp.md) `GHSA-5r5h-q934-cccp`, `CVE-2023-41378` · Go `github.com/projectcalico/calico`: affected `<=3.25.1 || >=3.26.0, <3.26.3`, fixed in `3.26.3` · CVSS 7.5 High · Not analysed yet · Published 6 Nov 2023 · Tags: Denial of service, CWE-703, CWE-755 - [Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs](https://agentprime.io/advisories/CVE-2023-5090.md) `CVE-2023-5090` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 6 Nov 2023 · Tags: CWE-755 - [Squid: dos against http and https](https://agentprime.io/advisories/CVE-2023-5824.md) `CVE-2023-5824` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-755 - [Directus crashes on invalid WebSocket message](https://agentprime.io/advisories/GHSA-hmgw-9jrg-hf2m.md) `GHSA-hmgw-9jrg-hf2m`, `CVE-2023-45820` · npm `directus`: affected `>=10.4.0, <10.6.2`, fixed in `10.6.2` · CVSS 5.9 Medium · Not analysed yet · Published 19 Oct 2023 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor](https://agentprime.io/advisories/CVE-2023-44186.md) `CVE-2023-44186` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 11 Oct 2023 · Tags: CWE-755 - [BIG-IP IPSEC vulnerability](https://agentprime.io/advisories/CVE-2023-41085.md) `CVE-2023-41085` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-755 - [Specific Cilium configurations vulnerable to DoS via Kubernetes annotations](https://agentprime.io/advisories/GHSA-24m5-r6hv-ccgp.md) `GHSA-24m5-r6hv-ccgp`, `BIT-cilium-2023-41332`, `BIT-cilium-operator-2023-41332`, `BIT-cilium-proxy-2023-41332`, `BIT-hubble-2023-41332`, `BIT-hubble-relay-2023-41332`, `BIT-hubble-ui-2023-41332`, `BIT-hubble-ui-backend-2023-41332`, `CVE-2023-41332`, `GO-2023-2079` · Go `github.com/cilium/cilium`: affected `<1.12.14 || >=1.13.0, <1.13.7 || >=1.14.0, <1.14.2`, fixed in `1.12.14`, `1.13.7`, `1.14.2` · CVSS 3.5 Low · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-755 - [Cortex XDR Agent: Local Windows User Can Disable the Agent](https://agentprime.io/advisories/CVE-2023-3280.md) `CVE-2023-3280` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 5.5 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: CWE-755 - [Apollo Router Unnamed "Subscription" operation results in Denial-of-Service](https://agentprime.io/advisories/GHSA-w8vq-3hf9-xppx.md) `GHSA-w8vq-3hf9-xppx`, `CVE-2023-41317` · crates.io `apollo-router`: affected `>=1.28.0, <1.29.1`, fixed in `1.29.1` · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2023 · Tags: CWE-755 - [DoS in lua-http library](https://agentprime.io/advisories/CVE-2023-4540.md) `CVE-2023-4540` · CVE record: Daurnimator lua-http · CVSS 7.5 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-755 - [Improper handling of session establishment errors in xrdp](https://agentprime.io/advisories/CVE-2023-40184.md) `CVE-2023-40184` · CVE record: neutrinolabs xrdp · CVSS 2.6 Low · Not analysed yet · Published 30 Aug 2023 · Tags: CWE-755 - [Improper handling of exceptional conditions in Zyxel XGS2220-30 firmware and others](https://agentprime.io/advisories/CVE-2023-28768.md) `CVE-2023-28768` · CVE record: Zyxel XGS2220-30 firmware and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Aug 2023 · Tags: CWE-755 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .