Advisories · Weakness
CWE-839.
Every Advisory and CVE whose sources give the weakness CWE-839, newest first.
- CVSS 6.1 Medium
GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.
- GNU mtools
- CWE-839
- CVSS 7.5 High
Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
- asterisk
- certified-asterisk
- CWE-839
- CVSS 7.5 High
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp has an Improper Input Validation vulnerability
- CWE-20
- CWE-839
<5.19.8 || >=6.0.0, <6.2.7 · fixed in 5.19.8, 6.2.7
GHSA-xjwq-9jw5-jf7w · CVE-2026-49432 - CVSS 9.8 CriticalCritical · CVSS 9+
IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
- Linux kernel
- CWE-839
- CVSS 3.7 Low
GNU SASL: GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step…
- GNU SASL
- CWE-839
- CVSS 5.3 Medium
Exim: Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads…
- Exim
- CWE-839
- CVSS 8.6 High
Buffer overflow in global memory region
- ABB Freelance controllers AC 700F
- ABB Freelance controllers AC 900F
- CWE-839
- CVSS 9.1 CriticalCritical · CVSS 9+
The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient restriction of URL para…
- CWE-839
- CVSS 7.5 High
Denial of service via malformed network packet
- MongoDB Inc. MongoDB Server
- CWE-839