Advisories · Weakness
CWE-755.
Every Advisory and CVE whose sources give the weakness CWE-755, newest first.
- CVSS 3.1 Low
Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations
- Weak cryptography or TLS
- CWE-755
<4.5.1 · fixed in 4.5.1
GHSA-29wx-vh33-7x7r · CVE-2024-51744 - CVSS 5.1 Medium
loona-hpack Panic Vulnerability
- CWE-754
- CWE-755
<0.4.3 · fixed in 0.4.3
GHSA-7vm6-qwh5-9x44 · CVE-2024-51502 - CVSS 8.2 High
Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 6.9 Medium
Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.2 High
Memory leak
- Eclipse Foundation Mosquitto
- Denial of service
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 6.9 Medium
Remotely exploitable Denial of Service in Tonic
- CWE-755
>=0.12.2, <0.12.3 · fixed in 0.12.3
GHSA-4jwc-w2hc-78qv · CVE-2024-47609 - CVSS 8.7 High
WatchGuard Firebox Single Sign-On Client Denial-of-Service
- WatchGuard SSO Client
- CWE-755
- CVSS 7.5 High
Device crash via malformed MQTT packet when downlink is enabled in Meshtastic device firmware
- meshtastic firmware
- CWE-755
- CVSS 8.7 High
Improper handling of exceptional conditions in NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series…
- NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX, Jetson TX1, Jetson Nano series
- CWE-755
- CVSS 9.8 CriticalCritical · CVSS 9+
Improper handling of exceptional conditions in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Firefox ESR
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 4.3 Medium
Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to
- CWE-280
- CWE-755
<2.0.1 · fixed in 2.0.1
GHSA-w9mh-5x8j-9754 · CVE-2024-39691 - CVSS 7.5 High
Apache Tomcat - Denial of Service
- Denial of service
- CWE-755
>=11.0.0-M1, <11.0.0-M21 || >=10.1.0-M1, <10.1.25 || >=9.0.0-M1, <9.0.90 || >=8.5.0, <=8.5.100 · fixed in 11.0.0-M21, 10.1.25, 9.0.90
GHSA-wm9w-rjj3-j356 · CVE-2024-34750 - CVSS 7.5 High
Improper input validation in OneFlow-Inc.
- CWE-755
- CVSS 8.1 High
Privilege Escalation in mintplex-labs/anything-llm
- mintplex-labs/anything-llm
- CWE-755
- CVSS 5.1 Medium
An issue was discovered on Mercusys MW325R EU V3 MW325R(EU)_V3_1.11.0 221019 devices.
- CWE-755
- CVSS 6.3 Medium
Nautobot is a Network Source of Truth and Network Automation Platform. A user with permissions to view Dynamic Group records (`extras.view_dynamicgroup` permission) can use the Dynamic Group detail...
- CWE-280
- CWE-755
>=2.0.0, <2.3.0b1 · fixed in 2.3.0b1
GHSA-qmjf-wc2h-6x3q · CVE-2024-36112 - CVSS 4.3 Medium
D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability
- D-Link G416
- CWE-755
- CVSS 7.5 High
@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed
- CWE-755
>=1.3.0, <1.10.1 · fixed in 1.10.1
GHSA-hgxw-5xg3-69jx · CVE-2024-32652 - CVSS 7.1 High
Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.5 High
Traefik vulnerable to denial of service with Content-length header
- Denial of service
- CWE-755
<2.11.2 · fixed in 2.11.2
GHSA-4vwx-54mw-vqfw · CVE-2024-28869 - CVSS 8.7 High
Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 5.3 Medium
Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck
- Juniper Networks Junos OS
- CWE-755
- CVSS 4.3 Medium
Matrix IRC Bridge truncated content of messages can be leaked
- CWE-280
- CWE-755
<2.0.0 · fixed in 2.0.0
GHSA-wm4w-7h2q-3pf7 · CVE-2024-32000 - CVSS 2.2 Low
SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used
- CWE-755
<1.30.1 · fixed in 1.30.1
GHSA-j85q-46hg-36p2 · CVE-2024-32001 - CVSS 6.6 Medium
JFrog Artifactory Sensitive Data Leakage in Repository configuration process
- JFrog Artifactory
- CWE-755
- CVSS 7.4 High
Protocol Downgrade in Comarch ERP XL
- Comarch ERP XL
- CWE-755
- CVSS 7.5 High
Envoy crashes when using an address type that isn’t supported by the OS
- envoy
- CWE-248
- CWE-755
- CVSS 8.6 High
Quarkus Improper Handling of Insufficient Permissions or Privileges and Improper Handling of Exceptional Conditions vulnerability
- Insecure deserialization
- CWE-280
<2.13.9.Final || >=3.0.0.Final, <3.2.9.Final · fixed in 2.13.9.Final, 3.2.9.Final
GHSA-8j3x-w35r-rw4r · CVE-2023-6267 - CVSS 7.5 High
An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a denial of service.
- CWE-755
- CVSS 7.5 High
An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30.
- CWE-755
- CVSS 6.5 Medium
Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled
- Juniper Networks Junos OS
- CWE-755
- CVSS 5.9 Medium
Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 5.5 Medium
An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10.
- CWE-755
- CVSS 5.5 Medium
Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-755
- CVSS 7.5 High
Duplicate Advisory: Improper Handling of Exceptional Conditions in Newtonsoft.Json
- CWE-755
<13.0.1 · fixed in 13.0.1
GHSA-8rfx-6mr3-5jh3 - CVSS 7.5 High
ReVanced API vulnerable to Denial of Service due to lack of error caching
- revanced-api
- CWE-755
- CVSS 5.4 Medium
Unauthenticated Denial of Service in the octokit/webhooks library
- CWE-755
<3.1.2 · fixed in 3.1.2
GHSA-pwfr-8pq7-x9qv · CVE-2023-50728 - CVSS 6.5 Medium
Denial of Service Vulnerability in Some ZTE Mobile Internet Products
- ZTE MC801A
- ZTE MC801A1
- CWE-755
- CVSS 3.1 Low
Microweber missing standardized error handling mechanism
- CWE-544
- CWE-755
<2.0.0 · fixed in 2.0.0
GHSA-9r6p-hg4g-5gxp · CVE-2023-6599 - CVSS 6.5 Medium
Elasticsearch Improper Handling of Exceptional Conditions
- CWE-755
>=7.0.0, <7.17.14 || >=8.0.0, <8.10.3 · fixed in 7.17.14, 8.10.3
GHSA-285m-vhfq-xx4h · CVE-2023-46673 - CVSS 3.9 Low
Floating point Exception in adjust_plines_for_skipcol() in vim
- vim
- CWE-755
- CVSS 7.5 High
Calico Typha denial of service vulnerability
- Denial of service
- CWE-703
<=3.25.1 || >=3.26.0, <3.26.3 · fixed in 3.26.3
GHSA-5r5h-q934-cccp · CVE-2023-41378 - CVSS 6.0 Medium
Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- CWE-755
- CVSS 7.5 High
Squid: dos against http and https
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- CWE-755
- CVSS 5.9 Medium
Directus crashes on invalid WebSocket message
- CWE-755
>=10.4.0, <10.6.2 · fixed in 10.6.2
GHSA-hmgw-9jrg-hf2m · CVE-2023-45820 - CVSS 7.5 High
Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.5 High
BIG-IP IPSEC vulnerability
- F5 BIG-IP
- CWE-755
- CVSS 3.5 Low
Specific Cilium configurations vulnerable to DoS via Kubernetes annotations
- CWE-755
<1.12.14 || >=1.13.0, <1.13.7 || >=1.14.0, <1.14.2 · fixed in 1.12.14, 1.13.7, 1.14.2
GHSA-24m5-r6hv-ccgp · CVE-2023-41332 - CVSS 5.5 Medium
Cortex XDR Agent: Local Windows User Can Disable the Agent
- Palo Alto Networks Cortex XDR Agent
- CWE-755
- CVSS 7.5 High
Apollo Router Unnamed "Subscription" operation results in Denial-of-Service
- CWE-755
>=1.28.0, <1.29.1 · fixed in 1.29.1
GHSA-w8vq-3hf9-xppx · CVE-2023-41317 - CVSS 7.5 High
DoS in lua-http library
- Daurnimator lua-http
- CWE-755
- CVSS 2.6 Low
Improper handling of session establishment errors in xrdp
- neutrinolabs xrdp
- CWE-755
- CVSS 6.5 Medium
Improper handling of exceptional conditions in Zyxel XGS2220-30 firmware and others
- Zyxel XGS2220-30 firmware
- Zyxel XMG1930-30 firmware
- CWE-755