Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

CWE-784

6 published CVEs are weaknesses of this kind, as the records or NVD name it.

Atom feed of new CVEsWhat CWE-784 is, at MITRE (opens in a new tab)

Newest CVEs

  • CVE-2026-60134

    Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision

    Weintek · cMT3092X firmware

    High8.7
  • CVE-2026-45055

    CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header

    cubecart · v6

    High8.1
  • CVE-2024-9820

    WP 2FA with Telegram <= 3.0 - Two-Factor Authentication Bypass

    dueclic · AuthPress

    Medium6.5
  • CVE-2023-3050

    Authentication Bypass in TMT's Lockcell

    TMT · Lockcell

    Critical9.8
  • CVE-2022-3083

    All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application…

    Landis+Gyr · E850 (ZMQ200)

    Low3.9
  • CVE-2020-8184

    A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker…

    https://github.com/rack/rack

    High7.5
All 6 in the list