Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

CWE-684

33 published CVEs are weaknesses of this kind, as the records or NVD name it.

Atom feed of new CVEsWhat CWE-684 is, at MITRE (opens in a new tab)

Newest CVEs

  • CVE-2026-125729

    Plack::Middleware::CSP versions before 0.03 for Perl send the Content Security Policy under the wrong header name, so browsers never enforce it

    Plack-Middleware-CSP

    Not scored
  • CVE-2026-119078

    Apache Commons Codec: Blake3 doFinalize is stateless; the documented KDF example derives identical keys

    Apache Software Foundation · Apache Commons Codec

    Not scored
  • CVE-2026-106390

    Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information…

    Google · Chrome

    Medium4.3
  • CVE-2026-106361

    Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social…

    Google · Chrome

    Medium6.5
  • CVE-2026-79126

    Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially…

    Google · Chrome

    Medium5.9
  • CVE-2026-52735

    ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

    ZcashFoundation · zebra

    Critical9.3
  • CVE-2026-44597

    Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011.

    torproject · Tor

    Low3.7
  • CVE-2026-40685

    In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted…

    Exim · Exim

    Medium6.5
  • CVE-2026-40684

    In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records.…

    Exim · Exim

    Medium5.9
  • CVE-2026-42255

    Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.

    Technitium · DnsServer

    High7.2
All 33 in the list