CWE-671
6 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 6Published CVEs6 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-33389
Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0
Nozomi Networks · Guardian
Medium5.3 - CVE-2026-31985
Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0
Nozomi Networks · Remote Collector
High8.3 - CVE-2025-24024
Mjolnir v1.9.0 accepts commands from any room
matrix-org · mjolnir
Critical9.1 - CVE-2023-20115
A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an…
Cisco · Cisco NX-OS Software
Medium5.4 - CVE-2022-29163
Bypass of password requirements when sharing a folder via the Circles app in Nextcloud Server
nextcloud · security-advisories
Low3.5 - CVE-2018-13283
Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct…
Synology · SSL VPN Client
High8.8