# CWE-923. Every Advisory and CVE whose sources give the weakness CWE-923, newest first. ## Records, newest first (an older page) - [IBM Fusion improper communication restriction](https://agentprime.io/advisories/CVE-2024-22315.md) `CVE-2024-22315` · CVE record: IBM Fusion and 2 more · CVSS 4.0 Medium · Not analysed yet · Published 28 Jan 2025 · Tags: CWE-923 - [Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted](https://agentprime.io/advisories/CVE-2024-47490.md) `CVE-2024-47490` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-923 - [Sudo for Windows Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-43571.md) `CVE-2024-43571` · CVE record: Microsoft Windows 11 Version 24H2 · CVSS 5.6 Medium · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-923 - [Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro](https://agentprime.io/advisories/CVE-2024-47125.md) `CVE-2024-47125` · CVE record: goTenna Pro · CVSS 7.6 High · Not analysed yet · Published 26 Sept 2024 · Tags: CWE-923 - [Multiple Pimax products accept WebSocket connections from unintended endpoints.](https://agentprime.io/advisories/CVE-2024-41889.md) `CVE-2024-41889` · CVE record: Pimax Pimax Play and 1 more · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2024 · Tags: CWE-923 - [Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network](https://agentprime.io/advisories/CVE-2024-39537.md) `CVE-2024-39537` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-923 - [In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC…](https://agentprime.io/advisories/CVE-2024-6222.md) `CVE-2024-6222` · CVE record: Docker Inc. Docker Desktop · CVSS 7.3 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-923 - [OpenVPN 2: The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to…](https://agentprime.io/advisories/CVE-2024-24974.md) `CVE-2024-24974` · CVE record: OpenVPN OpenVPN 2 · CVSS 7.5 High · Not analysed yet · Published 8 Jul 2024 · Tags: CWE-923 - [RICOH COMPANY, LTD Ricoh Streamline NX PC Client: Improper restriction of communication channel to intended endpoints issue exists in Ricoh…](https://agentprime.io/advisories/CVE-2024-36252.md) `CVE-2024-36252` · CVE record: RICOH COMPANY, LTD Ricoh Streamline NX PC Client · CVSS 6.3 Medium · Not analysed yet · Published 19 Jun 2024 · Tags: CWE-923 - [Mullvad VPN through 2024.1 on Android does not set a DNS server in the blocking state (after a hard failure to create a tunnel), and thus DNS traffic can leave the device.](https://agentprime.io/advisories/CVE-2024-34446.md) `CVE-2024-34446` · CVE record · CVSS 7.5 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-923 - [Element Android Intent Redirection](https://agentprime.io/advisories/CVE-2024-26131.md) `CVE-2024-26131` · CVE record: element-hq element-android · CVSS 8.4 High · Not analysed yet · Published 20 Feb 2024 · Tags: CWE-923, CWE-940 - [Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured.](https://agentprime.io/advisories/CVE-2023-28078.md) `CVE-2023-28078` · CVE record: Dell Dell SmartFabric OS10 · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Feb 2024 · Tags: CWE-923 - [Junos OS Evolved: Packets which are not destined to the router can reach the RE](https://agentprime.io/advisories/CVE-2023-44195.md) `CVE-2023-44195` · CVE record: Juniper Networks Junos OS Evolved · CVSS 5.4 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-923 - [NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arb…](https://agentprime.io/advisories/CVE-2023-25518.md) `CVE-2023-25518` · CVE record: NVIDIA Jetson AGX Xavier series, Jetson Xavier NX · CVSS 7.1 High · Not analysed yet · Published 23 Jun 2023 · Tags: CWE-923 - [FTP Agent forwards traffic on inactive ports to LinkManager](https://agentprime.io/advisories/CVE-2022-38125.md) `CVE-2022-38125` · CVE record: Secomea SiteManager · CVSS 2.9 Low · Not analysed yet · Published 19 Apr 2023 · Tags: CWE-923 - [Paragon Active Assurance: Enabling the timescaledb enables IP forwarding](https://agentprime.io/advisories/CVE-2023-28971.md) `CVE-2023-28971` · CVE record: Juniper Networks Paragon Active Assurance · CVSS 7.2 High · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-923 - [IP filter vulnerability in ABAP Platform and SAP Web Dispatcher](https://agentprime.io/advisories/CVE-2023-29108.md) `CVE-2023-29108` · CVE record: SAP ABAP Platform and SAP Web Dispatcher · CVSS 5.0 Medium · Not analysed yet · Published 11 Apr 2023 · Tags: CWE-923 - [coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints](https://agentprime.io/advisories/GHSA-h828-v5pv-33qx.md) `GHSA-h828-v5pv-33qx`, `CVE-2022-2837` · Go `github.com/coredns/coredns`: affected `<=1.9.3`, no fixed version yet · CVSS 6.1 Medium · Not analysed yet · Published 3 Mar 2023 · Tags: Open redirect, CWE-923 - [coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints](https://agentprime.io/advisories/GHSA-ch7v-37xg-75ph.md) `GHSA-ch7v-37xg-75ph`, `CVE-2022-2835` · Go `github.com/coredns/coredns`: affected `<=1.9.3`, no fixed version yet · CVSS 4.4 Medium · Not analysed yet · Published 3 Mar 2023 · Tags: CWE-923 - [Linux kernel: An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can…](https://agentprime.io/advisories/CVE-2022-2663.md) `CVE-2022-2663` · CVE record: Linux kernel · No CVSS score · Not analysed yet · Published 1 Sept 2022 · Tags: CWE-923 - [Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a malicious QR code scanner.](https://agentprime.io/advisories/CVE-2022-30729.md) `CVE-2022-30729` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 3.3 Low · Not analysed yet · Published 7 Jun 2022 · Tags: CWE-923 - [OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism](https://agentprime.io/advisories/GHSA-qpwc-p365-pqrr.md) `GHSA-qpwc-p365-pqrr`, `CVE-2016-5362`, `PYSEC-2026-854` · PyPI `neutron`: affected `<7.0.5 || >=8.0.0, <8.1.1`, fixed in `7.0.5`, `8.1.1` · CVSS 8.2 High · Not analysed yet · Published 14 May 2022 · Tags: CWE-923 - [Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro](https://agentprime.io/advisories/CVE-2021-38487.md) `CVE-2021-38487` · CVE record: RTI Connext Professional and 1 more · CVSS 8.8 High · Not analysed yet · Published 5 May 2022 · Tags: CWE-406, CWE-923 - [GateManager does not enforce strict hostname matching for WEB server](https://agentprime.io/advisories/CVE-2021-32004.md) `CVE-2021-32004` · CVE record: Secomea GateManager · CVSS 3.7 Low · Not analysed yet · Published 22 Nov 2021 · Tags: CWE-923 - [Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint](https://agentprime.io/advisories/GHSA-5mv9-q7fq-9394.md) `GHSA-5mv9-q7fq-9394`, `CVE-2021-32635` · Go `github.com/sylabs/singularity`: affected `>=3.7.2, <3.7.4`, fixed in `3.7.4` · CVSS 6.3 Medium · Not analysed yet · Published 1 Jun 2021 · Tags: CWE-20, CWE-923 - [PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access](https://agentprime.io/advisories/CVE-2019-17440.md) `CVE-2019-17440` · CVE record: Palo Alto Networks PAN-OS · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Dec 2019 · Tags: CWE-923 - [Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended Endpoints](https://agentprime.io/advisories/CVE-2018-10596.md) `CVE-2018-10596` · CVE record: Medtronic 2090 CareLink Programmer and 1 more · CVSS 7.1 High · Not analysed yet · Published 2 Jul 2018 · Tags: CWE-923 - [In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comprising two or more Q…](https://agentprime.io/advisories/CVE-2017-3891.md) `CVE-2017-3891` · CVE record: BlackBerry QNX Software Development Platform (QNX SDP) · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Nov 2017 · Tags: CWE-923 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .