CWE-688 Function Call With Incorrect Variable or Reference as Argument
variantThe product calls a function, procedure, or routine, but the caller specifies the wrong variable or reference as one of the arguments, which may lead to undefined behavior and resultant weaknesses.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (9)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-33549US | high8.8 | — | ||
SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of STATUT misha… | ||||
| CVE-2021-23034US | high7.5 | — | ||
On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause the… | ||||
| CVE-2021-43216US | medium6.5 | — | ||
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability | ||||
| CVE-2026-101959US | medium6.5 | — | ||
A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unau… | ||||
| CVE-2023-20061US | medium6.5 | — | ||
Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forger… | ||||
| CVE-2021-33713US | medium5.5 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a hash function is called with an incorrect argument leadin… | ||||
| CVE-2022-30187US | low1.9OT elevated | — | ||
Azure Storage Library Information Disclosure Vulnerability | ||||
| CVE-2026-76878US | — | — | ||
In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the all_proje… | ||||
| CVE-2026-12311US | — | — | ||
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderb… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan