CWE-649

8 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 3Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-95105
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
danielberkompas · cloak
High8.2
CVE-2026-105208
ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens
zitadel · zitadel
High8.7
CVE-2025-41351
Weak encryption on Funambol's cloud server
Funambol · Cloud Server
Medium6.0
CVE-2025-5323
fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking
fossasia · open-event-server
Medium6.3
CVE-2024-10772
SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modification
SICK AG · SICK InspectorP61x
High8.8
CVE-2024-36279
Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" App versions prior…
FreeFrom K.K. · "FreeFrom - the nostr client" App for Android
Medium5.3
CVE-2010-3300
It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
OWASP ESAPI
Medium5.9
CVE-2019-3730
RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an…
Dell · RSA BSAFE MES
Medium5.9