CWE-840
107 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 107
- Last 12 months
- 39
- Critical
- 4
- Known exploited
- 0
Critical 4High 21Medium 73Low 9Not scored 0
CVEs per yearBy the year they were published
- 20192
- 20203
- 20216
- 202215
- 202312
- 202413
- 202518
- 202638
Newest CVEs
- CVE-2026-116461
Omega Solution Restro POS sale-invoice logic error
Omega Solution · Restro POS
Medium5.3 - CVE-2026-106070
A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after the local and central header validation…
nodejs · node
Low3.7 - CVE-2026-115248
subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow
subhajitkhan · online-clinic-management-system
Medium5.3 - CVE-2026-112028
light0011 cms Vote VoteController.class.php logic error
light0011 · cms
Medium6.9 - CVE-2026-109406
macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error
macrozheng · mall
Medium5.3 - CVE-2026-108789
deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow
deepseek-ai · deepseek-harness
Medium5.1 - CVE-2026-108784
macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error
macrozheng · mall
Medium6.9 - CVE-2026-105573
newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error
newbee-ltd · newbee-mall
Medium5.3 - CVE-2026-77166
The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes…
Nextcloud · Collectives
Low2.4 - CVE-2026-82982
The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing an approver from approving or rejecting…
Nextcloud · Approval
Medium4.3