Advisories · Weakness
CWE-909.
Every Advisory and CVE whose sources give the weakness CWE-909, newest first.
- CVSS 8.2 High
libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset
- libexpat
- CWE-909
- CVSS 4.8 Medium
Exim: In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA…
- Exim
- CWE-909
- CVSS 8.7 High
Account Takeover via Reset Password Functionality in PAD CMS
- Polska Akademia Dostępności PAD CMS
- CWE-909
- CVSS 3.3 Low
Moby firewalld reload removes bridge network isolation
- CWE-909
<25.0.13 || >=26.0.0-rc1, <28.0.0 · fixed in 25.0.13, 28.0.0
GHSA-4vq8-7jfc-9cvp · CVE-2025-54410 - CVSS 5.1 Medium
Moby firewalld reload makes published container ports accessible from remote hosts
- CWE-909
>=28.2.0, <28.3.3 · fixed in 28.3.3
GHSA-x4rx-4gw3-53p4 · CVE-2025-54388 - CVSS 7.1 High
Teradata Vantage Editor 1.0.1 is mostly intended for SQL database access and docs.teradata.com access, but provides unintended functionality (including Chromium Developer Tools) that can result in a…
- CWE-909
- CVSS 6.6 Medium
AES/CBC Constant IV Vulnerability in ESPTouch v2
- espressif esp-idf
- Weak cryptography or TLS
- CWE-909
- CVSS 9.3 CriticalCritical · CVSS 9+
Multiple issues in ctl(4) CAM Target Layer
- FreeBSD
- Memory corruption
- CWE-909
- CVSS 2.6 Low
LaTeX post content manipulation via renderer state leak across contexts
- Mattermost
- CWE-909
- CVSS 6.2 Medium
ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet, because of an attempted a…
- CWE-909
-
A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer).
- virglrenderer
- CWE-909
- CVSS 7.5 High
Missing Initialization of Resource in Apache Arrow
- CWE-909
>=0.12.0, <0.15.1 · fixed in 0.15.1
GHSA-cjw4-2w9r-r8mv · CVE-2019-12410 -
kernel: An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC…
- kernel
- CWE-909
- CVSS 7.5 High
Missing Initialization of Resource in pnet
- CWE-909
<0.27.2 · fixed in 0.27.2
GHSA-24g6-5rx7-58wj · CVE-2019-25054 - CVSS 9.8 CriticalCritical · CVSS 9+
Memory corruption in array-tools
- Memory corruption
- CWE-909
<0.3.2 · fixed in 0.3.2
GHSA-6wp2-fw3v-mfmc · CVE-2020-36452 -
A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1.
- kernel
- CWE-909
-
The Eclipse Foundation Eclipse OpenJ9: In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API…
- The Eclipse Foundation Eclipse OpenJ9
- CWE-909
- CVSS 5.4 Medium
Phoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configuration
- Phoenix Contact TC MGUARD RS4000 4G VZW VPN (1010461)
- Phoenix Contact TC MGUARD RS4000 4G ATT VPN (1010463)
- CWE-909
- CVSS 7.5 High
[UNKNOWN] cockpit: It was found that cockpit before version 184 used glib's base64 decode functionality…
- [UNKNOWN] cockpit
- CWE-909