Advisories · Weakness
CWE-628.
Every Advisory and CVE whose sources give the weakness CWE-628, newest first.
- CVSS 4.3 Medium
Tanium addressed a business logic error in Threat Response.
- Tanium Threat Response
- CWE-628
- CVSS 8.2 High
libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments
- mz-automation libiec61850
- Memory corruption
- CWE-628
- CVSS 8.2 High
Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up
- Apache Software Foundation Apache Thrift
- CWE-409
- CWE-628
- CVSS 8.7 High
Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount
- ZcashFoundation zebra
- CWE-628
- CVSS 9.8 CriticalCritical · CVSS 9+
Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO sessi…
- CWE-305
- CWE-628
- CVSS 7.9 High
KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
- Linux kernel
- CWE-628
- CWE-754
- CVSS 7.8 High
iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()
- InternationalColorConsortium iccDEV
- Memory corruption
- CWE-123
- CVSS 6.1 Medium
iccDEV has Undefined Behavior - Null Pointer Passed to memcpy() in CIccTagSparseMatrixArray
- InternationalColorConsortium iccDEV
- Memory corruption
- CWE-20
- CVSS 4.3 Medium
A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of t…
- Axis Communications AB AXIS OS
- CWE-628
- CWE-1287
- CVSS 7.5 High
MIT krb5: A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x…
- MIT krb5
- CWE-628
- CVSS 5.7 Medium
Snapd seccomp filter TIOCSTI ioctl bypass
- Canonical snapd
- CWE-628