CWE-573
9 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 9Published CVEs9 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-89087
The cstruct package before 6.3.0 for OCaml mishandles indexes.
OCaml · cstruct
High7.3 - CVE-2026-59998
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.
OpenBSD · OpenSSH
Medium4.8 - CVE-2026-41583
ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling
ZcashFoundation · zebra
Critical9.3 - CVE-2026-28498
Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding
authlib · authlib
High8.2 - CVE-2025-69287
BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability
bsv-blockchain · ts-sdk
Medium5.4 - CVE-2025-69202
axios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header
arthurfiorette · axios-cache-interceptor
Medium6.0 - CVE-2025-46330
Snowflake Connector for C/C++ retries malformed requests
snowflakedb · libsnowflakeclient
Low3.3 - CVE-2025-21601
Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device
Juniper Networks · Junos OS
High8.7 - CVE-2019-14829
A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities…
Moodle
Medium4.3