CWE-241

35 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 14Medium 17Low 4Not scored 0

CVEs per yearBy the year they were published

CVE-2026-14916
Kong API Gateway Enterprise: JWT Algorithm-Confusion
Kong · Kong Enteprise Gateway
High7.7
CVE-2026-73785
HPE IceWall Federation Agent and Proxy, Denial of Service vulnerability
Hewlett Packard Enterprise · HPE IceWall products
High7.5
CVE-2026-47110
Tiptap for PHP < 2.1.1 DoS via Malformed href Attribute
ueberdosis · tiptap-php
High7.1
CVE-2025-63548
An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to bear a non-valid…
Product not named
High7.5
CVE-2025-66550
Nextcloud Calendar attachments of local files are offered to downloaded
nextcloud · security-advisories
Medium5.7
CVE-2024-21935
Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands to remove files…
AMD · AMD Instinct™ MI300X
Medium5.0
CVE-2024-21927
Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated…
AMD · AMD Instinct™ MI300X
Medium5.0
CVE-2025-7339
on-headers vulnerable to http response header manipulation
jshttp · on-headers
Low3.4
CVE-2025-2268
HP LaserJet MFP M232-M237 Printer Series - Potential Denial of Service
HP Inc. · HP LaserJet MFP M232-M237 Printer Series
Medium6.9
CVE-2025-1004
Certain HP LaserJet Pro Printers – Potential Denial of Service
HP Inc. · Certain HP LaserJet Pro Printers
Medium6.9