CWE-392
12 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 12Published CVEs12 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical7 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-42246
net-imap vulnerable to STARTTLS stripping via invalid response timing
ruby · net-imap
High7.6 - CVE-2026-20005
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort…
Cisco · Cisco Secure Firewall Threat Defense (FTD) Software
Medium5.8 - CVE-2025-59398
The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, because a CiString<255>…
EVerest · libocpp
Low3.1 - CVE-2025-23270
NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive information via a…
NVIDIA · Jetson Orin, IGX Orin and Xavier Devices
High7.1 - CVE-2025-26268
DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the…
DragonflyDB · Dragonfly
Low3.3 - CVE-2025-32743
In ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty string when the TC (Truncated) bit is set in a DNS response. This…
ConnMan · ConnMan
Critical9.0 - CVE-2024-12797
RFC7250 handshakes with unauthenticated servers don't abort as expected
OpenSSL · OpenSSL
High7.4 - CVE-2024-39697
phonenumber panics on parsing crafted phonenumber inputs
whisperfish · rust-phonenumber
High8.6 - CVE-2023-48430
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices does not check the length of parameters…
Siemens · SINEC INS
Low2.7 - CVE-2023-42447
blurhash panics on parsing crafted inputs
whisperfish · blurhash-rs
High8.6