Advisories · Weakness
CWE-343.
Every Advisory and CVE whose sources give the weakness CWE-343, newest first.
- CVSS 6.6 Medium
Juju affected by Confused Deputy IDOR attack via Predictable user specified ID in Juju Secrets
- Broken access control
- CWE-343
>=0.0.0-20221021155847-35c560704ee2, <0.0.0-20260319091847-d06919eb03ec · fixed in 0.0.0-20260319091847-d06919eb03ec
GHSA-5cj2-rqqf-hx9p · CVE-2026-32694 - CVSS 2.1 Low
Nhost Storage Affected by MIME Type Spoofing via Trusted Client Content-Type Header in Storage Upload
- Unrestricted file upload
- CWE-343
<0.0.0-20260318074820-c4bd53f042d7 · fixed in 0.0.0-20260318074820-c4bd53f042d7
GHSA-g9f6-9775-hffm · CVE-2026-33221 -
A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and…
- Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400
- CWE-343
- CVSS 6.5 Medium
Schneider Electric Modicon PLCs Predictable Value Range from Previous Values
- Schneider Electric Modicon M221
- Schneider Electric Modicon M241
- CWE-343
- CVSS 6.4 Medium
GE Hydran M2 Predictable Value Range from Previous Values
- GE Hydran M2, containing the 17046 Ethernet option
- CWE-343