CWE-649
9 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 9Published CVEs9 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-96414
In affected versions of Octopus Server, insufficient integrity protection of authentication cookies, combined with incorrect validation of permissions assigned…
Octopus Deploy · Octopus Server
High8.7 - CVE-2026-95105
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
danielberkompas · cloak
High8.2 - CVE-2026-105208
ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens
zitadel · zitadel
High8.7 - CVE-2025-41351
Weak encryption on Funambol's cloud server
Funambol · Cloud Server
Medium6.0 - CVE-2025-5323
fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking
fossasia · open-event-server
Medium6.3 - CVE-2024-10772
SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modification
SICK AG · SICK InspectorP61x
High8.8 - CVE-2024-36279
Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" App versions prior…
FreeFrom K.K. · "FreeFrom - the nostr client" App for Android
Medium5.3 - CVE-2010-3300
It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
OWASP ESAPI
Medium5.9 - CVE-2019-3730
RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an…
Dell · RSA BSAFE MES
Medium5.9