CWE-675 Multiple Operations on Resource in Single-Operation Context

class

The product performs the same operation on a resource two or more times, when the operation should only be applied once.

01

übergeordnete Schwächen

Übergeordnete Klassen, zu denen dies gehört.

02

untergeordnete Schwächen

Spezifischere Einträge unterhalb dieses.

03

Schwachstellen (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-17638UScritical9.4Exploit
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, t…
CVE-2025-68973UShigh7.0—
In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For Extended…
CVE-2025-21960USmedium5.5—
In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() The bnxt_rx_pkt() updates ip_summed value at the end…
CVE-2026-78663US——
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream…
CVE-2026-77860US——
In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP esse…
CVE-2026-68179US——
In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock error paths nsm_dev_ioctl() jumps to the common out label even whe…
04

Quelle

Wo diese Definition veröffentlicht ist.

scry

Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan