CWE-520
5 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 5
- Last 12 months
- 4
- Critical
- 1
- Known exploited
- 0
Critical 1High 4Medium 0Low 0Not scored 0
CVEs per yearBy the year they were published
- 20241
- 20264
Newest CVEs
- CVE-2026-13444
Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
IBM · Langflow OSS
High8.1 - CVE-2026-13442
Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints
IBM · Langflow OSS
High7.1 - CVE-2026-2450
.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of…
upKeeper Solutions · upKeeper Instant Privilege Access
High7.4 - CVE-2019-25608
Iperius Backup 6.1.0 Privilege Escalation via Backup Job
Iperius · Iperius Backup
High8.6 - CVE-2024-46943
An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate…
Product not named
Critical9.1