CWE-241

Improper Handling of Unexpected Data Type

5 CVEs Avg CVSS 5.9 MITRE
0
CRITICAL
0
HIGH
5
MEDIUM
0
LOW
1
POC
0
KEV

Monthly

CVE-2025-66550 MEDIUM POC PATCH This Month

A security vulnerability in Nextcloud Calendar (CVSS 5.7). Risk factors: public PoC available. Vendor patch is available.

Information Disclosure Calendar Nextcloud
NVD GitHub
CVSS 3.1
5.7
EPSS
0.0%
CVE-2024-21935 MEDIUM This Month

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure
NVD
CVSS 3.1
5.0
EPSS
0.0%
CVE-2024-21927 MEDIUM This Month

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service
NVD
CVSS 3.1
5.0
EPSS
0.1%
CVE-2025-2268 MEDIUM This Month

The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Hp Denial Of Service 6Gx09A Firmware 6Gx09E Firmware 9Yf91E Firmware +51
NVD
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-1004 MEDIUM This Month

Certain HP LaserJet Pro printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer via IPP (Internet Printing Protocol). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Hp Denial Of Service G3Q78A Firmware G3Q79A Firmware Q3Q75A Firmware +7
NVD
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-66550
EPSS 0% CVSS 5.7
MEDIUM POC PATCH This Month

A security vulnerability in Nextcloud Calendar (CVSS 5.7). Risk factors: public PoC available. Vendor patch is available.

Information Disclosure Calendar Nextcloud
NVD GitHub
CVE-2024-21935
EPSS 0% CVSS 5.0
MEDIUM This Month

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure
NVD
CVE-2024-21927
EPSS 0% CVSS 5.0
MEDIUM This Month

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service
NVD
CVE-2025-2268
EPSS 0% CVSS 6.9
MEDIUM This Month

The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Hp Denial Of Service 6Gx09A Firmware +53
NVD
CVE-2025-1004
EPSS 0% CVSS 6.9
MEDIUM This Month

Certain HP LaserJet Pro printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer via IPP (Internet Printing Protocol). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Hp Denial Of Service G3Q78A Firmware +9
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy