Advisories · Weakness
CWE-705.
Every Advisory and CVE whose sources give the weakness CWE-705, newest first.
- CVSS 6.9 Medium
mathurvishal CloudClassroom-PHP-Project studentdetails.php redirect
- mathurvishal CloudClassroom-PHP-Project
- CWE-698
- CWE-705
- CVSS 7.1 High
PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114
- Race condition
- Server-side request forgery (SSRF)
<4.6.58 · fixed in 4.6.58
GHSA-rg5q-pp8p-f7jm · CVE-2026-55537 - CVSS 6.6 Medium
baseline-browser-mapping process termination on invalid input causes denial of service
- CWE-705
- CWE-755
>=2.0.0, <2.11.0 · fixed in 2.11.0
GHSA-w5vr-8v7q-w6rv · CVE-2026-45819 - CVSS 3.7 Low
Denial of service via DoH3 queries
- PowerDNS DNSdist
- CWE-705
- CVSS 5.3 Medium
a4m4 Student-Management-System Admin Endpoint admin redirect
- a4m4 Student-Management-System
- CWE-698
- CWE-705
- CVSS 4.8 Medium
@tootallnate/once vulnerable to Incorrect Control Flow Scoping
- CWE-705
<2.0.1 || >=3.0.0, <3.0.1 · fixed in 2.0.1, 3.0.1
GHSA-vpq2-c234-7xj6 · CVE-2026-3449 - CVSS 5.3 Medium
go2ismail Free-CRM Administrative redirect
- go2ismail Free-CRM
- CWE-698
- CWE-705
- CVSS 5.3 Medium
go2ismail Asp.Net-Core-Inventory-Order-Management-System Administrative redirect
- go2ismail Asp.Net-Core-Inventory-Order-Management-System
- CWE-698
- CWE-705
- CVSS 8.7 High
TMM vulnerability
- F5 BIG-IP
- CWE-705
- CVSS 6.5 Medium
OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping.
- CWE-705
- CVSS 6.9 Medium
ScriptAndTools Real Estate Management System userlist.php redirect
- ScriptAndTools Real Estate Management System
- CWE-698
- CWE-705