CWE-372
13 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 13Published CVEs13 of them scored
- 7Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-57893
Incomplete internal state distinction in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an…
Intel(R) TDX Migration Trust Domain (MigTD)
Medium6.8 - CVE-2026-119140
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yield
bytecodealliance · wasmtime
Medium5.9 - CVE-2023-54406
Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scripts
frappe · frappe
Medium6.9 - CVE-2026-84897
wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion
wolfSSL Inc. · wolfSSH
Medium6.9 - CVE-2026-41388
OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handling
OpenClaw · OpenClaw
Medium6.3 - CVE-2026-41340
OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom Migration
OpenClaw · OpenClaw
Medium6.3 - CVE-2026-41300
OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote Onboarding
OpenClaw · OpenClaw
Medium6.9 - CVE-2024-22590
The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten…
Product not named
Critical9.1 - CVE-2023-4012
Incomplete Internal State Distinction in ntpsec
NTPsec · ntpsec
High7.5 - CVE-2023-36834
Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS
Juniper Networks · Junos OS
Medium6.5