CWE-480

CVEs per yearBy the year they were published

1. 20221
2. 20241
3. 20251
4. 20268

Newest CVEs

• CVE-2026-83525

  Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request.

  Apache Software Foundation · Apache Kafka

  Medium6.5
• CVE-2026-79643

  Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect Operator…

  Dell · Secure Connect Gateway 5.0 - Application

  High7.3
• CVE-2026-63421

  Keystone: `graphql.maxTake` bypass with negative `take`

  keystonejs · keystone

  High7.5
• CVE-2026-44722

  pyzipper: Encryption bypass for small files encrypted with pyzipper

  danifus · pyzipper

  Medium6.2
• CVE-2026-15043

  DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text

  HMBRAND · DBI::SQL::Nano

  Critical9.8
• CVE-2026-48497

  Envoy: Abnormal process termination in DNS UDP filter

  envoyproxy · envoy

  Medium5.9
• CVE-2026-43114

  netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

  Linux · Linux

  Critical9.4
• CVE-2026-4748

  pf silently ignores certain rules

  FreeBSD · FreeBSD

  High7.5
• CVE-2025-52985

  Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching

  Juniper Networks · Junos OS Evolved

  Medium6.9
• CVE-2024-35190

  Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests

  asterisk · asterisk

  Medium5.8

Vendors it comes up for most

1. Apache Software Foundation1
2. Dell1
3. FreeBSD1
4. HMBRAND1
5. Juniper Networks1
6. Linux1
7. asterisk1
8. danifus1
9. envoyproxy1
10. keystonejs1