Threats Tagged 'cwe-233'
View all threats tagged with 'cwe-233'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cwe-233'
Click on any threat for detailed analysis and mitigation recommendations
0 Insufficient Parameter Validation in the SchedGet() system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel. Join the discussion | CVE Database V5 | 07/14/2026, 17:13:07 UTC Added: 07/14/2026, 17:49:00 UTC |
0 CVE-2026-32998 is a critical vulnerability in Veeam Service Provider Console involving improper handling of parameters (CWE-233) that allows remote code execution. The vulnerability has a high CVSS 4.0 score of 9.4, indicating network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, availability, and security requirements. No patch or official remediation guidance is currently provided, and no known exploits are reported in the wild. The affected versions are unspecified. This vulnerability poses a significant risk of unauthorized code execution on affected systems. Join the discussion | CVE Database V5 | 05/28/2026, 04:01:38 UTC Added: 05/28/2026, 14:18:45 UTC |
0 Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03. Join the discussion | CVE Database V5 | 05/13/2026, 18:46:13 UTC Added: 05/13/2026, 19:21:31 UTC |
0 In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write. Join the discussion | CVE Database V5 | 10/15/2025, 05:41:50 UTC Added: 10/15/2025, 05:50:31 UTC |
0 CVE-2025-55078 is a medium-severity vulnerability in Eclipse Foundation's ThreadX real-time operating system prior to version 6.4.3. The flaw arises from improper pointer validation in certain system calls, allowing an attacker with limited privileges to cause a denial of service by passing pointers to reserved or unmapped memory regions. This leads to a crash of the affected system, impacting availability. Exploitation does not require user interaction but does require local access with low privileges. No known exploits are currently in the wild. The vulnerability affects embedded and IoT devices using ThreadX, which are prevalent in various European industries. Mitigation involves updating to ThreadX version 6.4. Join the discussion | CVE Database V5 | 10/14/2025, 07:28:56 UTC Added: 10/14/2025, 07:29:51 UTC |
Showing 1 to 5 of 5 results