CWE-704
292 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 292
- Last 12 months
- 48
- Critical
- 23
- Known exploited
- 0
Critical 23High 203Medium 60Low 6Not scored 0
CVEs per yearBy the year they were published
- 2018105
- 201831
- 20205
- 20207
- 20201
- 202119
- 202311
- 202513
- 202516
- 20252
- 202639
- 202617
Newest CVEs
- CVE-2026-121589
spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion
spatie · url-signer
Medium6.9 - CVE-2026-121262
phpMyAdmin SQL-Parser ExplainStatement.php parse type conversion
phpMyAdmin · SQL-Parser
Medium6.9 - CVE-2026-110816
qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string
ljharb · qs
Medium6.3 - CVE-2026-104634
beam_mcp: JSON boolean and null tool arguments reach dispatch as strings
ScriptKittyOS · beam_mcp
Low2.3 - CVE-2026-105754
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
vllm-project · vllm
Medium6.5 - CVE-2026-104420
Zebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped Blocks
ZcashFoundation · zebra
Medium6.9 - CVE-2026-20249
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
High8.6 - CVE-2026-86348
MS Calendar plugin: unrecovered handler panics from malformed post-action requests could crash the plugin process
Mattermost · Mattermost
Medium4.3 - CVE-2026-87546
Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access…
Google · Chrome
Medium4.3 - CVE-2026-58822
In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no…
Google · Android
Critical9.8