Advisories · Weakness
CWE-779.
Every Advisory and CVE whose sources give the weakness CWE-779, newest first.
- CVSS 5.4 Medium
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-779
- CVSS 5.4 Medium
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-779
- CVSS 6.9 Medium
PocketMine-MP has LogDoS by many junk properties in client data JWT in LoginPacket
- CWE-779
<5.42.1 · fixed in 5.42.1
GHSA-xp4f-g2cm-rhg7 · CVE-2026-86200 - CVSS 5.3 Medium
Denial of service due to insufficient input validation in authentication logging.
- Acronis Cyber Protect 17
- CWE-779
- CVSS 2.7 Low
AIOHTTP Vulnerable to Cookie Parser Warning Storm
- CWE-779
<3.13.3 · fixed in 3.13.3
GHSA-fh55-r93g-j68g · CVE-2025-69230 - CVSS 7.5 High
DoS attack against the Stork UI from an unauthenticated user
- ISC Stork
- Denial of service
- CWE-779
- CVSS 5.4 Medium
A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into…
- CWE-779
- CVSS 5.4 Medium
Open OnDemand Shell App closed websocket DoS
- OSC ondemand
- Denial of service
- CWE-779
- CVSS 4.3 Medium
Jenkins HTML Publisher Plugin vulnerability displays controller file system information in its logs
- Path traversal
- CWE-779
<427 · fixed in 427
GHSA-367v-5ppj-2hrx · CVE-2025-53651 - CVSS 4.3 Medium
Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages
- Hard-coded credentials
- CWE-779
<687.689.v1a · fixed in 687.689.v1a
GHSA-9768-hprv-crj5 · CVE-2025-53650 - CVSS 7.5 High
Suricata oversized resource names utilizing DNS name compression can lead to resource starvation
- OISF suricata
- CWE-405
- CWE-779
- CVSS 9.8 CriticalCritical · CVSS 9+
Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector and Unify server appl…
- CWE-779
- CVSS 8.6 High
SuiteCRM v4 API Excessive log data DOS
- salesagility SuiteCRM
- CWE-779
- CVSS 5.5 Medium
glance-store logs s3 access keys
- Information disclosure
- CWE-779
<=4.6.1 · no fixed version yet
GHSA-wgpq-p2hm-56v9 · CVE-2024-1141 - CVSS 8.1 High
An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.
- Symantec Identity Management And Governance
- CWE-779
- CVSS 4.0 Medium
Samsung Mobile Samsung Account: Sensitive log information leakage vulnerability in Samsung Account prior to version…
- Samsung Mobile Samsung Account
- CWE-779
- CVSS 7.5 High
Potential secrets being logged to disk in CVE Services
- CVEProject cve-services
- CWE-779
- CVSS 4.3 Medium
Insufficient scope checks allows adding unrelated audit log entries
- Secomea GateManager
- CWE-779
- CVSS 5.5 Medium
Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.
- Samsung Mobile Devices
- CWE-779
-
Samsung Mobile Watch Active2 PlugIn: Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151…
- Samsung Mobile Watch Active2 PlugIn
- CWE-779
-
Samsung Mobile Watch Active PlugIn: Improper log management vulnerability in Watch Active PlugIn prior to version…
- Samsung Mobile Watch Active PlugIn
- CWE-779
-
Samsung Mobile Galaxy Watch3 PlugIn: Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version…
- Samsung Mobile Galaxy Watch3 PlugIn
- CWE-779
-
Samsung Mobile Galaxy Watch PlugIn: Improper log management vulnerability in Galaxy Watch PlugIn prior to version…
- Samsung Mobile Galaxy Watch PlugIn
- CWE-779