VulnSea

CWE-166

CVEs classified under CWE-166, newest first.

5 CVEsRSS

CVE-2026-102082Medium· 5.9
2w ago

An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS). This issue is will occur w…

An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS). This issue is will occur w…

▾ SunlitJuniper Networks · Junos OSEPSS 0.34%via NVD
CVE-2026-97913Medium· 5.5
1mo ago

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure cmd stream ends with a stop op While the QSIZE register setting should prevent an out of bounds access of the command stream, it is not clear whe…

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure cmd stream ends with a stop op While the QSIZE register setting should prevent an out of bounds access of the command stream, it is not clear whe…

▾ SunlitLinux · LinuxEPSS 0.19%via NVD
CVE-2026-49825High· 8.2
2mo ago

lxml is a library for processing XML and HTML in the Python language

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in ``lxml.html.defs.link_attrs`` were missing ``xlink:href``, which can be used for URL bypass attacks in embedded SVG/MathML/etc. cont…

▾ TwilightRed Hat · Red Hat OpenStack Platform 16.2EPSS 0.30%via NVD
CVE-2025-68206High· 7.5⚖ disputed
10mo ago

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: add seqadj extension for natted connections Sequence adjustment may be required for FTP traffic with PASV/EPSV modes. due to need to re-write packet…

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: add seqadj extension for natted connections Sequence adjustment may be required for FTP traffic with PASV/EPSV modes. due to need to re-write packet…

▾ TwilightLinux · LinuxEPSS 0.71%via NVD
CVE-2025-39738Medium· 5.5
1y ago

kernel: Linux kernel: Denial of Service in Btrfs due to relocation of partially dropped subvolumes (CVE-2025-39738)

A flaw was found in the Linux kernel. A local user can trigger a transaction abort and a warning in the Btrfs (B-tree file system) by attempting to relocate a partially dropped subvolume that lacks an orphan item. This vulnerability can le…

▾ SunlitRed Hat · Red Hat Enterprise Linux 7EPSS 0.18%via CSAF
CWE-166 vulnerabilities (CVEs) · VulnSea