Advisories · Weakness
CWE-670.
Every Advisory and CVE whose sources give the weakness CWE-670, newest first.
- CVSS 7.5 High
Incorrect handling of internal redirects results in crash in Envoy
- envoy
- CWE-670
- CVSS 6.8 Medium
Authorization Policy bypass in Istio
- istio
- CWE-670
- CVSS 7.5 High
Drainage of FeeCollector's Block Transaction Fees in cronos
- CWE-670
<0.6.5 · fixed in 0.6.5
GHSA-f854-hpxv-cw9r · CVE-2021-43839 - CVSS 8.7 High
Specification non-compliance in JUMPI
- CWE-670
<0.31.0 · fixed in 0.31.0
GHSA-pvh2-pj76-4m96 · CVE-2021-41153 - CVSS 7.4 High
Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability
- Cisco IOS XE Software
- CWE-670
- CVSS 6.2 Medium
Missing Handler in @scandipwa/magento-scripts
- CWE-670
>=1.5.1, <1.5.3 · fixed in 1.5.3
GHSA-52qp-gwwh-qrg4 · CVE-2021-32684 - CVSS 8.1 High
Logic error in Legion of the Bouncy Castle BC Java
- CWE-670
>=1.65, <1.67 · fixed in 1.67
GHSA-73xv-w5gp-frxh · CVE-2020-28052 - CVSS 5.3 Medium
Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CWE-670
- CVSS 4.0 Medium
Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-670
- CVSS 9.8 CriticalCritical · CVSS 9+
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js
- CWE-670
- CWE-1254
<2.4.24 · fixed in 2.4.24
GHSA-34r7-q49f-h37c · CVE-2015-8857