CWE-779 · Denial of Service
Logging of Excessive Data
20CVEs
SortMost likely exploited
20 CVEs with CWE-779 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-36416SuiteCRM v4 API Excessive log data DOSsalesagility · SuiteCRM · CVSS 8.6 · 2024-06-10 | 8.6 | 2.0% | 2024-06-10 |
| CVE-2024-36072Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector a…No vendor recorded · CVSS 9.8 · 2024-06-27 | 9.8 | 1.0% | 2024-06-27 |
| CVE-2025-51397A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a c…Livehelperchat · Live Helper Chat · CVSS 5.4 · 2025-07-21 | 5.4 | 1.0% | 2025-07-21 |
| CVE-2022-31004Potential secrets being logged to disk in CVE ServicesCVEProject · cve-services · CVSS 7.5 · 2022-05-25 | 7.5 | 1.0% | 2022-05-25 |
| CVE-2026-86200PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWTpmmp · PocketMine-MP · CVSS 5.3 · 2026-09-09 | 5.3 | 0.6% | 2026-09-09 |
| CVE-2023-23949An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.Broadcom · Symantec Identity Management And Governance · CVSS 8.1 · 2023-01-24 | 8.1 | 0.6% | 2023-01-24 |
| CVE-2022-25779Insufficient scope checks allows adding unrelated audit log entriesSecomea · GateManager · CVSS 4.3 · 2022-05-04 | 4.3 | 0.6% | 2022-05-04 |
| CVE-2024-13925Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive LoggingKlarna · Klarna Checkout for WooCommerce · CVSS 7.5 · 2025-04-17 | 7.5 | 0.5% | 2025-04-17 |
| CVE-2026-28718Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.Acronis · Acronis Cyber Protect 17 · CVSS 5.3 · 2026-03-05 | 5.3 | 0.4% | 2026-03-05 |
| CVE-2025-69230AIOHTTP Vulnerable to Cookie Parser Warning Stormaio-libs · aiohttp · CVSS 2.7 · 2026-01-05 | 2.7 | 0.4% | 2026-01-05 |
| CVE-2025-53636Open OnDemand Shell App closed websocket DoSOSC · ondemand · CVSS 5.4 · 2025-07-11 | 5.4 | 0.3% | 2025-07-11 |
| CVE-2021-25423Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user sm…Samsung Mobile · Watch Active2 PlugIn · 2021-06-11 | – | 0.2% | 2021-06-11 |
| CVE-2021-25422Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user sma…Samsung Mobile · Watch Active PlugIn · 2021-06-11 | – | 0.2% | 2021-06-11 |
| CVE-2021-25421Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user sm…Samsung Mobile · Galaxy Watch3 PlugIn · 2021-06-11 | – | 0.2% | 2021-06-11 |
| CVE-2021-25420Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user sma…Samsung Mobile · Galaxy Watch PlugIn · 2021-06-11 | – | 0.2% | 2021-06-11 |
| CVE-2024-1141Glance-store: glance store access key logged in debug log levelRed Hat · Red Hat OpenStack Platform 17.1 for RHEL 9 · CVSS 5.5 · 2024-02-01 | 5.5 | 0.2% | 2024-02-01 |
| CVE-2026-20210Cisco Catalyst SD-WAN Manager Privilege Escalation VulnerabilityCisco · Cisco Catalyst SD-WAN Manager · CVSS 5.4 · 2026-05-14 | 5.4 | 0.2% | 2026-05-14 |
| CVE-2026-20209Cisco Catalyst SD-WAN Manager Privilege Escalation VulnerabilityCisco · Cisco Catalyst SD-WAN Manager · CVSS 5.4 · 2026-05-14 | 5.4 | 0.2% | 2026-05-14 |
| CVE-2022-39874Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.Samsung Mobile · Samsung Account · CVSS 4 · 2022-10-07 | 4.0 | 0.2% | 2022-10-07 |
| CVE-2022-22291Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.Samsung Mobile · Samsung Mobile Devices · CVSS 5.5 · 2022-02-11 | 5.5 | 0.1% | 2022-02-11 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.