CWE-241 · Input Validation and Logic
Improper Handling of Unexpected Data Type
32CVEs
SortMost likely exploited
32 CVEs with CWE-241 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-30591NodeBB Pre-Authentication Denial-of-ServiceNodeBB, Inc. · NodeBB · CVSS 7.5 · 2023-09-29 | 7.5 | 59% | 2023-09-29 |
| CVE-2022-29181Improper Handling of Unexpected Data Type in Nokogirisparklemotion · nokogiri · CVSS 8.2 · 2022-05-20 | 8.2 | 3.2% | 2022-05-20 |
| CVE-2021-39131Improper Handling of Unexpected Data Type in cedsonicdoe · ced · CVSS 7.5 · 2021-08-17 | 7.5 | 1.9% | 2021-08-17 |
| CVE-2021-40116Multiple Cisco Products Snort Rule Denial of Service VulnerabilityCisco · Cisco Firepower Threat Defense Software · CVSS 8.6 · 2021-10-27 | 8.6 | 1.4% | 2021-10-27 |
| CVE-2022-24668A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all swift-nio-http2 versi…Swift Project · SwiftNIO HTTP2 · 2022-02-09 | – | 1.1% | 2022-02-09 |
| CVE-2021-32696Passing in a non-string 'html' argument can lead to unsanitized outputericnorris · striptags · CVSS 3.7 · 2021-06-18 | 3.7 | 1.1% | 2021-06-18 |
| CVE-2021-32655Files Drop public link can be added as federated sharenextcloud · security-advisories · CVSS 3.5 · 2021-06-01 | 3.5 | 1.0% | 2021-06-01 |
| CVE-2022-20730Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass VulnerabilityCisco · Cisco Firepower Threat Defense Software · CVSS 4 · 2022-05-03 | 4.0 | 1.0% | 2022-05-03 |
| CVE-2024-25966Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an improper handling of unexpected data type vulnerability. A remote unauthenticated attacker could potentially explo…Dell · PowerScale OneFS · CVSS 5.3 · 2024-05-14 | 5.3 | 0.9% | 2024-05-14 |
| CVE-2022-3029Fatal error on incorrect base64 data in RRDPNLnet Labs · Routinator · 2022-09-13 | – | 0.9% | 2022-09-13 |
| CVE-2023-5215Libnbd: crash or misbehaviour when nbd server returns an unexpected block sizeRed Hat · Red Hat Enterprise Linux 9 · CVSS 5.3 · 2023-09-28 | 5.3 | 0.8% | 2023-09-28 |
| CVE-2026-14916Kong API Gateway Enterprise: JWT Algorithm-ConfusionKong · Kong Enteprise Gateway · CVSS 7.7 · 2026-09-16 | 7.7 | 0.7% | 2026-09-16 |
| CVE-2022-22219Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environmentJuniper Networks · Junos OS · CVSS 5.9 · 2022-10-18 | 5.9 | 0.7% | 2022-10-18 |
| CVE-2022-1642A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch…Swift Project · Swift Corelib-Foundation · 2022-06-16 | – | 0.7% | 2022-06-16 |
| CVE-2024-9423Certain HP LaserJet Printers – Potential Denial of ServiceHP Inc. · Certain HP LaserJet Printers · CVSS 5.3 · 2024-10-02 | 5.3 | 0.6% | 2024-10-02 |
| CVE-2026-73785HPE IceWall Federation Agent and Proxy, Denial of Service vulnerabilityHewlett Packard Enterprise · HPE IceWall products · CVSS 7.5 · 2026-09-11 | 7.5 | 0.6% | 2026-09-11 |
| CVE-2026-47110Tiptap for PHP < 2.1.1 DoS via Malformed href Attributeueberdosis · tiptap-php · CVSS 6.5 · 2026-06-24 | 6.5 | 0.5% | 2026-06-24 |
| CVE-2025-2268HP LaserJet MFP M232-M237 Printer Series - Potential Denial of ServiceHP Inc. · HP LaserJet MFP M232-M237 Printer Series · CVSS 6.9 · 2025-03-14 | 6.9 | 0.5% | 2025-03-14 |
| CVE-2024-0151Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v…Arm · Arm v8-M Security Extensions Requirements on Development Tools · CVSS 6.5 · 2024-04-24 | 6.5 | 0.4% | 2024-04-24 |
| CVE-2025-1004Certain HP LaserJet Pro Printers – Potential Denial of ServiceHP Inc. · Certain HP LaserJet Pro Printers · CVSS 6.9 · 2025-02-06 | 6.9 | 0.4% | 2025-02-06 |
| CVE-2023-28961Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is usedJuniper Networks · Junos OS · CVSS 5.8 · 2023-04-17 | 5.8 | 0.4% | 2023-04-17 |
| CVE-2022-39065A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI…Ikea · TRÅDFRI gateway system · CVSS 6.5 · 2022-10-14 | 6.5 | 0.4% | 2022-10-14 |
| CVE-2022-39064An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple times, the bulb performs…Ikea · TRÅDFRI smart lighting system · CVSS 8.1 · 2022-10-14 | 8.1 | 0.4% | 2022-10-14 |
| CVE-2021-0243Junos OS: EX4300: Stateless firewall policer fails to discard trafficJuniper Networks · Junos OS · CVSS 4.7 · 2021-04-22 | 4.7 | 0.4% | 2021-04-22 |
| CVE-2025-66550Nextcloud Calendar attachments of local files are offered to downloadednextcloud · security-advisories · CVSS 5.7 · 2025-12-05 | 5.7 | 0.4% | 2025-12-05 |
| CVE-2024-37316Nextcloud Calendar's event create can create attachments that link to other websitesnextcloud · security-advisories · CVSS 4.6 · 2024-06-14 | 4.6 | 0.4% | 2024-06-14 |
| CVE-2025-63548An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to bear a non-valid value in any Boolean fie…No vendor recorded · CVSS 7.5 · 2026-05-01 | 7.5 | 0.3% | 2026-05-01 |
| CVE-2024-21927Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, ca…AMD · AMD Instinct™ MI300X · CVSS 5 · 2025-09-23 | 5.0 | 0.3% | 2025-09-23 |
| CVE-2022-22193Junos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command is executed the rpd process might crashJuniper Networks · Junos OS · CVSS 5.5 · 2022-04-14 | 5.5 | 0.2% | 2022-04-14 |
| CVE-2024-21935Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root di…AMD · AMD Instinct™ MI300X · CVSS 5 · 2025-09-23 | 5.0 | 0.2% | 2025-09-23 |
| CVE-2025-7339on-headers vulnerable to http response header manipulationjshttp · on-headers · CVSS 3.4 · 2025-07-17 | 3.4 | 0.2% | 2025-07-17 |
| CVE-2024-32268An issue in Tuya Smart camera U6N v.3.2.5 allows a remote attacker to cause a denial of service via a crafted packet to the network connection component.No vendor recorded · CVSS 3.3 · 2024-04-29 | 3.3 | 0.2% | 2024-04-29 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.