Advisories · Weakness
CWE-393.
Every Advisory and CVE whose sources give the weakness CWE-393, newest first.
- CVSS 9.9 CriticalCritical · CVSS 9+
Legacy Update ActiveX control accepts unauthorized hosting origins
- LegacyUpdate
- CWE-346
- CWE-393
- CVSS 6.8 Medium
Sssd: sssd: access control bypass via premature ldap access rule evaluation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-393
- CVSS 6.3 Medium
Apache Thrift: C++ WebSocket server transport does not read a full request length
- Apache Software Foundation Apache Thrift
- Memory corruption
- CWE-393
- CVSS 6.9 Medium
Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op
- Apache Software Foundation Apache Thrift
- Weak cryptography or TLS
- CWE-393
- CVSS 6.3 Medium
Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end
- Apache Software Foundation Apache Thrift
- Memory corruption
- CWE-393
- CVSS 8.3 High
Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage
- wolfSSL
- Memory corruption
- CWE-393
- CVSS 7.8 High
bpf: Fix linked reg delta tracking when src_reg == dst_reg
- Linux kernel
- CWE-393
- CVSS 9.3 CriticalCritical · CVSS 9+
Improper Certificate Verification in Szafir SDK
- Krajowa Izba Rozliczeniowa Szafir SDK
- Weak cryptography or TLS
- CWE-393
- CVSS 7.6 High
net-imap vulnerable to STARTTLS stripping via invalid response timing
- CWE-325
- CWE-392
<0.3.10 || >=0.4.0, <0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4 · fixed in 0.3.10, 0.4.24, 0.5.14, 0.6.4
GHSA-vcgp-9326-pqcp · CVE-2026-42246 - CVSS 6.7 Medium
OpenSC project pam_pkcs11: In OpenSC pam_pkcs11 before 0.6.13, pam_sm_authenticate() wrongly returns PAM_IGNORE in…
- OpenSC project pam_pkcs11
- CWE-393
- CVSS 8.1 High
Libssh: invalid return code for chacha20 poly1305 with openssl backend
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-393
- CVSS 5.6 Medium
xmlsoft libxml2: In libxml2 before 2.13.8 and 2.14.x before 2.14.2…
- xmlsoft libxml2
- CWE-393
- CVSS 8.8 High
Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-393
- CVSS 7.2 High
grav Server-side Template Injection (SSTI) mitigation bypass
- Other injection
- CWE-393
<1.7.42.2 · fixed in 1.7.42.2
GHSA-9436-3gmp-4f53 · CVE-2023-37897 - CVSS 5.3 Medium
Cloud Foundry GoRouter is vulnerable to cache poisoning
- Cloud Foundry Routing
- CWE-393