CWE-179

7 CVEs classified under CWE-179. Browse by severity and year.

Top CVEs for CWE-179
CVESeverityScorePublishedSummary
CVE-2022-1271High8.82022-08-31An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted f…
CVE-2025-4759High8.32025-05-16Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package U…
CVE-2026-49414High7.82026-06-27The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. A…
CVE-2026-25223High7.52026-02-03Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.2, a validation bypass vulnerability exists in Fastify where request body v…
CVE-2026-32305Medium5.32026-03-20Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS bypass throug…
CVE-2026-3832Low3.72026-04-30A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) resp…
CVE-2024-41686Low3.32024-07-26This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by cre…
All CVEs classified under CWE-179 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-49414High7.82026-06-27The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. A…
CVE-2026-3832Low3.72026-04-30A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) resp…
CVE-2026-32305Medium5.32026-03-20Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS bypass throug…
CVE-2026-25223High7.52026-02-03Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.2, a validation bypass vulnerability exists in Fastify where request body v…
CVE-2025-4759High8.32025-05-16Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package U…
CVE-2024-41686Low3.32024-07-26This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by cre…
CVE-2022-1271High8.82022-08-31An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted f…