CWE-628
11 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 11
- Last 12 months
- 8
- Critical
- 1
- Known exploited
- 0
Critical 1High 6Medium 4Low 0Not scored 0
CVEs per yearBy the year they were published
- 20192
- 20251
- 20268
Newest CVEs
- CVE-2026-116652
Tanium addressed a business logic error in Threat Response.
Tanium · Threat Response
Medium4.3 - CVE-2026-68907
libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments
mz-automation · libiec61850
High8.2 - CVE-2026-94636
Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up
Apache Software Foundation · Apache Thrift
High8.2 - CVE-2026-104430
Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount
ZcashFoundation · zebra
High8.7 - CVE-2026-19349
Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends
Lemonldap-NG-Portal
Critical9.8 - CVE-2026-43133
KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
Linux · Linux
High7.9 - CVE-2026-25634
iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()
InternationalColorConsortium · iccDEV
High7.8 - CVE-2026-21503
iccDEV has Undefined Behavior - Null Pointer Passed to memcpy() in CIccTagSparseMatrixArray
InternationalColorConsortium · iccDEV
Medium6.1 - CVE-2025-0325
A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour…
Axis Communications AB · AXIS OS
Medium4.3 - CVE-2019-14844
A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556…
MIT · krb5
High7.5