Advisories · Weakness
CWE-254.
Every Advisory and CVE whose sources give the weakness CWE-254, newest first.
- CVSS 5.3 Medium
Improper one time password handling in devise-two-factor
- CWE-254
<4.0.2 · fixed in 4.0.2
GHSA-jm35-h8q2-73mp · CVE-2021-43177 -
Vulnerability of design defects in the security algorithm component.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-254
- CVSS 7.8 High
An issue was discovered in osquery.
- Facebook osquery
- CWE-254
-
A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor (L4TM) functionality and by…
- Cisco Web Security Appliance unknown
- CWE-254
-
Cisco WebEx Meetings Server: A vulnerability in Cisco WebEx Meetings Server could allow an authenticated…
- Cisco WebEx Meetings Server
- CWE-254
-
Cisco Email Security Appliance: A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco…
- Cisco Email Security Appliance
- CWE-254