CWE-406 — known CVE vulnerabilities

CVEs classified under CWE-406, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2021-38135 — CVSS 8.6 (high): Possible External Service Interaction attack in iManager has been discovered in OpenText™ iManager 3.2.6.0000.
• CVE-2022-0028 — CVSS 8.6 (high) — actively exploited: A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP…
• CVE-2021-38487 — CVSS 8.2 (high): RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially…
• CVE-2023-49203 — CVSS 7.5 (high): Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes…
• CVE-2023-28456 — CVSS 7.5 (high): An issue was discovered in Technitium through 11.0.2. It enables attackers to launch amplification attacks (3 times more than other "golden…
• CVE-2023-28455 — CVSS 7.5 (high): An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium…
• CVE-2024-25015 — CVSS 7.5 (high): IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending HTTP requests that…
• CVE-2021-4234 — CVSS 7.5 (high): OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the…
• CVE-2021-43547 — CVSS 7.5 (high): TwinOaks Computing CoreDX DDS versions prior to 5.9.1 are susceptible to exploitation when an attacker sends a specially crafted packet to…
• CVE-2021-38425 — CVSS 7.5 (high): eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to exploitation when an attacker sends a specially crafted packet to…
• CVE-2021-38429 — CVSS 6.6 (medium): OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted…
• CVE-2025-58066 — CVSS 5.3 (medium): nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1.2.0 and 1.6.1…
• CVE-2019-14850 — CVSS 3.7 (low): A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and…
• CVE-2014-125036 — CVSS 2.6 (low): A vulnerability, which was classified as problematic, has been found in drybjed ansible-ntp. Affected by this issue is some unknown…