Advisories · Weakness
CWE-684.
Every Advisory and CVE whose sources give the weakness CWE-684, newest first.
- CVSS 4.3 Medium
Google Chrome: Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to…
- Google Chrome
- CWE-684
- CVSS 6.5 Medium
Google Chrome: Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior…
- Google Chrome
- CWE-684
- CVSS 5.9 Medium
Google Chrome: Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows…
- Google Chrome
- CWE-684
- CVSS 3.3 Low
cut: -s ignored in -z -d '' newline-delimiter mode
- CWE-684
<0.8.0 · fixed in 0.8.0
GHSA-pmfc-4wjj-gmhx · CVE-2026-35381 - CVSS 9.3 CriticalCritical · CVSS 9+
zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser
- CWE-684
<4.5.0 · fixed in 4.5.0
GHSA-gf9r-m956-97qx · CVE-2026-52735 - CVSS 3.7 Low
Tor: Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE…
- Tor
- CWE-684
- CVSS 6.5 Medium
Exim: In Exim before 4.99.2, when JSON lookup is enabled…
- Exim
- CWE-684
- CVSS 5.9 Medium
Exim: In Exim before 4.99.2, on systems using musl libc (not glibc)…
- Exim
- CWE-684
- CVSS 7.2 High
Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation.
- Technitium DnsServer
- CWE-684
- CVSS 3.3 Low
uutils coreutils has an Incorrect Provision of Specified Functionality Issue
- CWE-684
<0.8.0 · fixed in 0.8.0
GHSA-fhr3-xh3q-69w6 · CVE-2026-35379 - CVSS 3.3 Low
Duplicate Advisory: uutils coreutils has an Incorrect Provision of Specified Functionality Issue in its cut Utility
- CWE-684
<0.8.0 · fixed in 0.8.0
GHSA-532v-xp3f-837c - CVSS 6.9 Medium
Apache Log4j Core: log injection in `Rfc5424Layout` due to silent configuration incompatibility
- Other injection
- CWE-684
>=2.21.0, <2.25.4 || >=3.0.0-beta1, <=3.0.0-beta3 · fixed in 2.25.4
GHSA-445c-vh5m-36rj · CVE-2026-34478 - CVSS 8.7 High
RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation
- rustdesk-client RustDesk Client
- Weak cryptography or TLS
- CWE-684
- CVSS 8.7 High
RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryption
- rustdesk-server-pro RustDesk Server Pro
- Weak cryptography or TLS
- CWE-684
- CVSS 8.2 High
MISP: app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking…
- MISP
- CWE-684
- CVSS 3.2 Low
KDE Skanpage: In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents…
- KDE Skanpage
- CWE-684
- CVSS 7.8 High
Fortinet FortiOS: An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS…
- Fortinet FortiOS
- CWE-684
- CVSS 3.7 Low
Akamai Rate Control: Akamai Rate Control alpha before 2025 allows attackers to send requests above the…
- Akamai Rate Control
- CWE-684
- CVSS 4.2 Medium
QEMU: hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask…
- QEMU
- CWE-684
- CVSS 7.5 High
ScriptCase: In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23)…
- ScriptCase
- CWE-684
- CVSS 9.8 CriticalCritical · CVSS 9+
FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial (factory default) configuration.
- Century Systems Co., Ltd. FutureNet NXR-G110 series
- Century Systems Co., Ltd. FutureNet NXR-G060 series
- CWE-684
- CVSS 4.3 Medium
Incorrect Provision of Specified Functionality in GitLab
- GitLab
- CWE-684
- CVSS 2.6 Low
Incorrect Provision of Specified Functionality in GitLab
- GitLab
- CWE-684
- CVSS 7.4 High
Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability
- Cisco IOS XR Software
- CWE-684
- CVSS 5.7 Medium
Incorrect Provision of Specified Functionality in GitLab
- GitLab
- CWE-684
- CVSS 9.1 CriticalCritical · CVSS 9+
Incorrect Provision of Specified Functionality vulnerability in MESbook
- MESbook
- CWE-684
- CVSS 7.5 High
Incorrect cipher key & IV length processing
- OpenSSL
- CWE-684
- CVSS 8.6 High
bt: mesh: vulnerability in provisioning protocol implementation on provisionee side
- Zephyr
- CWE-684
- CVSS 6.5 Medium
Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c
- kernel
- Red Hat Enterprise Linux 6
- CWE-684
- CVSS 9.1 CriticalCritical · CVSS 9+
Siemens RUGGEDCOM i800: A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801…
- Siemens RUGGEDCOM i800
- Siemens RUGGEDCOM i800NC
- CWE-684
-
Attacker can reset the device with AT Command in the process of rebooting the device.
- LG mobile devices
- CWE-684
- CVSS 3.5 Low
Incorrect Provision of Specified Functionality in qutebrowser
- CWE-684
<1.11.1 · fixed in 1.11.1
GHSA-4rcq-jv2f-898j · CVE-2020-11054