# CWE-779.

Every Advisory and CVE whose sources give the weakness CWE-779, newest first.

## Records, newest first

- [Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-20210.md)
  `CVE-2026-20210` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 May 2026 · Tags: CWE-779
- [Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-20209.md)
  `CVE-2026-20209` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 May 2026 · Tags: CWE-779
- [PocketMine-MP has LogDoS by many junk properties in client data JWT in LoginPacket](https://agentprime.io/advisories/GHSA-xp4f-g2cm-rhg7.md)
  `GHSA-xp4f-g2cm-rhg7`, `CVE-2026-86200`, `PKSA-tnfd-ykdn-862g` · Packagist `pocketmine/pocketmine-mp`: affected `<5.42.1`, fixed in `5.42.1` · CVSS 6.9 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: CWE-779
- [Denial of service due to insufficient input validation in authentication logging.](https://agentprime.io/advisories/CVE-2026-28718.md)
  `CVE-2026-28718` · CVE record: Acronis Acronis Cyber Protect 17 · CVSS 5.3 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: CWE-779
- [AIOHTTP Vulnerable to Cookie Parser Warning Storm](https://agentprime.io/advisories/GHSA-fh55-r93g-j68g.md)
  `GHSA-fh55-r93g-j68g`, `CVE-2025-69230`, `PYSEC-2026-1105` · PyPI `aiohttp`: affected `<3.13.3`, fixed in `3.13.3` · CVSS 2.7 Low · Not analysed yet · Published 5 Jan 2026 · Tags: CWE-779
- [DoS attack against the Stork UI from an unauthenticated user](https://agentprime.io/advisories/CVE-2025-8696.md)
  `CVE-2025-8696` · CVE record: ISC Stork · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2025 · Tags: Denial of service, CWE-779
- [A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into…](https://agentprime.io/advisories/CVE-2025-51397.md)
  `CVE-2025-51397` · CVE record · CVSS 5.4 Medium · Not analysed yet · Published 21 Jul 2025 · Tags: CWE-779
- [Open OnDemand Shell App closed websocket DoS](https://agentprime.io/advisories/CVE-2025-53636.md)
  `CVE-2025-53636` · CVE record: OSC ondemand · CVSS 5.4 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: Denial of service, CWE-779
- [Jenkins HTML Publisher Plugin vulnerability displays controller file system information in its logs](https://agentprime.io/advisories/GHSA-367v-5ppj-2hrx.md)
  `GHSA-367v-5ppj-2hrx`, `CVE-2025-53651` · Maven `org.jenkins-ci.plugins:htmlpublisher`: affected `<427`, fixed in `427` · CVSS 4.3 Medium · Not analysed yet · Published 9 Jul 2025 · Tags: Path traversal, CWE-779
- [Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages](https://agentprime.io/advisories/GHSA-9768-hprv-crj5.md)
  `GHSA-9768-hprv-crj5`, `CVE-2025-53650` · Maven `org.jenkins-ci.plugins:credentials-binding`: affected `<687.689.v1a`, fixed in `687.689.v1a` · CVSS 4.3 Medium · Not analysed yet · Published 9 Jul 2025 · Tags: Hard-coded credentials, CWE-779
- [Suricata oversized resource names utilizing DNS name compression can lead to resource starvation](https://agentprime.io/advisories/CVE-2024-55628.md)
  `CVE-2024-55628` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-405, CWE-779
- [Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector and Unify server appl…](https://agentprime.io/advisories/CVE-2024-36072.md)
  `CVE-2024-36072` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jun 2024 · Tags: CWE-779
- [SuiteCRM v4 API Excessive log data DOS](https://agentprime.io/advisories/CVE-2024-36416.md)
  `CVE-2024-36416` · CVE record: salesagility SuiteCRM · CVSS 8.6 High · Not analysed yet · Published 10 Jun 2024 · Tags: CWE-779
- [glance-store logs s3 access keys](https://agentprime.io/advisories/GHSA-wgpq-p2hm-56v9.md)
  `GHSA-wgpq-p2hm-56v9`, `CVE-2024-1141`, `PYSEC-2026-1405` · PyPI `glance-store`: affected `<=4.6.1`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 1 Feb 2024 · Tags: Information disclosure, CWE-779
- [An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.](https://agentprime.io/advisories/CVE-2023-23949.md)
  `CVE-2023-23949` · CVE record: Symantec Identity Management And Governance · CVSS 8.1 High · Not analysed yet · Published 24 Jan 2023 · Tags: CWE-779
- [Samsung Mobile Samsung Account: Sensitive log information leakage vulnerability in Samsung Account prior to version…](https://agentprime.io/advisories/CVE-2022-39874.md)
  `CVE-2022-39874` · CVE record: Samsung Mobile Samsung Account · CVSS 4.0 Medium · Not analysed yet · Published 7 Oct 2022 · Tags: CWE-779
- [Potential secrets being logged to disk in CVE Services](https://agentprime.io/advisories/CVE-2022-31004.md)
  `CVE-2022-31004` · CVE record: CVEProject cve-services · CVSS 7.5 High · Not analysed yet · Published 25 May 2022 · Tags: CWE-779
- [Insufficient scope checks allows adding unrelated audit log entries](https://agentprime.io/advisories/CVE-2022-25779.md)
  `CVE-2022-25779` · CVE record: Secomea GateManager · CVSS 4.3 Medium · Not analysed yet · Published 4 May 2022 · Tags: CWE-779
- [Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.](https://agentprime.io/advisories/CVE-2022-22291.md)
  `CVE-2022-22291` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 5.5 Medium · Not analysed yet · Published 11 Feb 2022 · Tags: CWE-779
- [Samsung Mobile Watch Active2 PlugIn: Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151…](https://agentprime.io/advisories/CVE-2021-25423.md)
  `CVE-2021-25423` · CVE record: Samsung Mobile Watch Active2 PlugIn · No CVSS score · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-779
- [Samsung Mobile Watch Active PlugIn: Improper log management vulnerability in Watch Active PlugIn prior to version…](https://agentprime.io/advisories/CVE-2021-25422.md)
  `CVE-2021-25422` · CVE record: Samsung Mobile Watch Active PlugIn · No CVSS score · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-779
- [Samsung Mobile Galaxy Watch3 PlugIn: Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version…](https://agentprime.io/advisories/CVE-2021-25421.md)
  `CVE-2021-25421` · CVE record: Samsung Mobile Galaxy Watch3 PlugIn · No CVSS score · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-779
- [Samsung Mobile Galaxy Watch PlugIn: Improper log management vulnerability in Galaxy Watch PlugIn prior to version…](https://agentprime.io/advisories/CVE-2021-25420.md)
  `CVE-2021-25420` · CVE record: Samsung Mobile Galaxy Watch PlugIn · No CVSS score · Not analysed yet · Published 11 Jun 2021 · Tags: CWE-779

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-779>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-779/>. Everything for agents: <https://agentprime.io/llms.txt>.