CWE-241
33 CVEs classified under CWE-241. Browse by severity and year.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-40116 | High | 8.6 | 2021-10-27 | Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… |
CVE-2022-29181 | High | 8.2 | 2022-05-20 | Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, a… |
CVE-2022-39064 | High | 8.1 | 2022-10-14 | An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple time… |
CVE-2025-63548 | High | 7.5 | 2026-05-01 | An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to bear a non-valid valu… |
CVE-2025-2268 | High | 7.5 | 2025-03-14 | The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Prin… |
CVE-2024-21526 | High | 7.5 | 2024-07-10 | All versions of the package speaker are vulnerable to Denial of Service (DoS) when providing unexpected input types to the channels property of the Speaker obj… |
CVE-2024-21523 | High | 7.5 | 2024-07-10 | All versions of the package images are vulnerable to Denial of Service (DoS) due to providing unexpected input types to several different functions. This makes… |
CVE-2023-30591 | High | 7.5 | 2023-09-29 | Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, w… |
CVE-2022-3029 | High | 7.5 | 2022-09-13 | In NLnet Labs Routinator 0.9.0 up to and including 0.11.2, due to a mistake in error handling, data in RRDP snapshot and delta files that isn’t correctly base… |
CVE-2022-1642 | High | 7.5 | 2022-06-16 | A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document contai… |
CVE-2022-24668 | High | 7.5 | 2022-02-09 | A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all s… |
CVE-2021-39131 | High | 7.5 | 2021-08-17 | ced detects character encoding using Google’s compact_enc_det library. In ced v0.1.0, passing data types other than `Buffer` causes the Node.js process to cras… |
CVE-2026-47110 | Medium | 6.5 | 2026-06-24 | Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting T… |
CVE-2024-0151 | Medium | 6.5 | 2024-04-24 | Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains t… |
CVE-2022-39065 | Medium | 6.5 | 2022-10-14 | A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Sm… |
CVE-2021-0242 | Medium | 6.5 | 2021-04-22 | A vulnerability due to the improper handling of direct memory access (DMA) buffers on EX4300 switches on Juniper Networks Junos OS allows an attacker sending s… |
CVE-2022-22219 | Medium | 5.9 | 2022-10-18 | Due to the Improper Handling of an Unexpected Data Type in the processing of EVPN routes on Juniper Networks Junos OS and Junos OS Evolved, an attacker in dire… |
CVE-2023-28961 | Medium | 5.8 | 2023-04-17 | An Improper Handling of Unexpected Data Type vulnerability in IPv6 firewall filter processing of Juniper Networks Junos OS on the ACX Series devices will preve… |
CVE-2025-66550 | Medium | 5.7 | 2025-12-05 | Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.17 and 5.2.4, when a malicious user creates a calendar event with a crafted attachment that li… |
CVE-2022-22193 | Medium | 5.5 | 2022-04-14 | An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a loca… |