CWE-840
01
Schwachstellen (122)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-1871US | critical9.8OT kritisch | KEV | ||
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and… | ||||
| CVE-2006-2370US | high7.5 | Exploit | ||
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or auth… | ||||
| CVE-2022-32207US | critical9.8OT erhöht | — | ||
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final t… | ||||
| CVE-2024-27822US | high7.8 | Exploit | ||
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to gain root privileges. | ||||
| CVE-2019-12265US | medium5.3 | — | ||
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3… | ||||
| CVE-2019-12262US | critical9.8 | — | ||
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Lo… | ||||
| CVE-2022-4719US | critical9.8 | — | ||
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5. | ||||
| CVE-2022-3363US | critical9.8 | — | ||
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7. | ||||
| CVE-2021-4171US | critical9.8 | — | ||
calibre-web is vulnerable to Business Logic Errors | ||||
| CVE-2020-9922US | medium6.5 | Exploit | ||
A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Pr… | ||||
| CVE-2025-2938US | high8.8 | — | ||
An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users… | ||||
| CVE-2023-6514US | high8.8 | — | ||
The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to… | ||||
| CVE-2022-0935US | high8.8 | — | ||
Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97. | ||||
| CVE-2021-22926US | high7.5 | — | ||
libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).… | ||||
| CVE-2019-3787US | high8.8 | — | ||
Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does not contain an @ charac… | ||||
| CVE-2026-1322US | high8.1 | — | ||
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticat… | ||||
| CVE-2022-27782US | high7.5 | — | ||
libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connection… | ||||
| CVE-2022-0524US | high7.5 | — | ||
Business Logic Errors in GitHub repository publify/publify prior to 9.2.7. | ||||
| CVE-2019-12264US | high7.1 | — | ||
Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component. | ||||
| CVE-2025-13239US | high7.5 | — | ||
A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown functionality of the f… | ||||
02
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan