CWE-394

CVEs per yearBy the year they were published

1. 20191
2. 20202
3. 20221
4. 20233
5. 20241
6. 20255
7. 20264

Newest CVEs

• CVE-2026-107785

  Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated

  Sirius Computer, Inc. · Crux Agent

  Medium6.3
• CVE-2026-73064

  In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the…

  trustedfirmware · Mbed TLS

  Low2.9
• CVE-2026-76956

  In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to…

  libexpat project · libexpat

  Medium5.9
• CVE-2026-25085

  Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value

  Copeland · Copeland XWEB 300D PRO

  High8.6
• CVE-2025-48510

  Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.

  AMD · AMD μProf

  High7.1
• CVE-2025-12516

  Lack of Graceful Error Handling - HTTP 5xx Error

  Azure Access Technology · BLU-IC2

  Critical10.0
• CVE-2025-12515

  Systemic Internal Server Errors - HTTP 500 Response

  Azure Access Technology · BLU-IC2

  Critical10.0
• CVE-2025-22854

  Possible thread exhaustion from processing http responses in PingFederate Google Adapter

  Ping Identity · PingFederate

  Medium6.9
• CVE-2025-23013

  In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module (PAM) that can be…

  Yubico · pam-u2f

  High7.3
• CVE-2024-1713

  Plv8 Deferred Trigger Privilege Escalation

  Plv8 · Plv8

  High7.2

Vendors it comes up for most

1. Azure Access Technology2
2. Juniper Networks2
3. MongoDB Inc.2
4. AMD1
5. Copeland1
6. Honeywell1
7. Ping Identity1
8. Plv81
9. Siemens1
10. Sirius Computer, Inc.1