CWE-839 · 7 records
Numeric Range Comparison Without Minimum Check
CVEs in this class
7 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2019-20925No exploit | Denial of service via malformed network packetmongodb · mongodb · CWE-839 | High7.5 | — | 1.6% | Nov 24, 2020 |
30Monitor | CVE-2026-57186No exploit | Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parserasterisk · asterisk · CWE-839 | High7.5 | — | 0.6% | 1 day ago |
30Monitor | CVE-2023-22854No exploit | The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download amitel · micontact center business · CWE-839 | High7.5 | — | 0.6% | Feb 13, 2023 |
30Monitor | CVE-2023-0425No exploit | Buffer overflow in global memory regionabb · ac700f firmware · CWE-839 | High7.5 | — | 0.4% | Aug 7, 2023 |
24Monitor | CVE-2026-118384No exploit | GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.gnu · mtools · CWE-839 | Medium6.1 | — | 0.3% | 1 day ago |
21Monitor | CVE-2026-56968No exploit | GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory dignu · sasl · CWE-839 | Medium5.3 | — | 0.4% | Jun 23, 2026 |
21Monitor | CVE-2026-48840No exploit | Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memorexim · exim · CWE-839 | Medium5.3 | — | 0.2% | May 29, 2026 |
- CVE-2019-2092531Monitor
Denial of service via malformed network packet
HighCVSS 7.5No exploitEPSS 1%mongodb · mongodbNov 24, 2020
- CVE-2026-5718630Monitor
Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
HighCVSS 7.5No exploitEPSS 0%asterisk · asterisk1 day ago
- CVE-2023-2285430Monitor
The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download a
HighCVSS 7.5No exploitEPSS 0%mitel · micontact center businessFeb 13, 2023
- CVE-2023-042530Monitor
Buffer overflow in global memory region
HighCVSS 7.5No exploitEPSS 0%abb · ac700f firmwareAug 7, 2023
- CVE-2026-11838424Monitor
GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c.
MediumCVSS 6.1No exploitEPSS 0%gnu · mtools1 day ago
- CVE-2026-5696821Monitor
GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory di
MediumCVSS 5.3No exploitEPSS 0%gnu · saslJun 23, 2026
- CVE-2026-4884021Monitor
Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memor
MediumCVSS 5.3No exploitEPSS 0%exim · eximMay 29, 2026