Advisories · Weakness

CWE-840.

Every Advisory and CVE whose sources give the weakness CWE-840, newest first.

CVE-2026-116461 CVE record

CVSS 5.3 Medium

Omega Solution Restro POS sale-invoice logic error
- Omega Solution Restro POS
- CWE-840
Not analysed yet 26 Oct 2026
CVE-2026-106070 CVE record

CVSS 3.7 Low

node: A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong…
- node
- CWE-840
Not analysed yet 23 Oct 2026
CVE-2026-115248 CVE record

CVSS 5.3 Medium

subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow
- subhajitkhan online-clinic-management-system
- CWE-840
- CWE-841
Not analysed yet 22 Oct 2026
CVE-2026-112028 CVE record

CVSS 6.9 Medium

light0011 cms Vote VoteController.class.php logic error
- light0011 cms
- CWE-840
Not analysed yet 18 Oct 2026
CVE-2026-109406 CVE record

CVSS 5.3 Medium

macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error
- macrozheng mall
- CWE-840
Not analysed yet 13 Oct 2026
CVE-2026-108789 CVE record

CVSS 5.1 Medium

deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow
- deepseek-ai deepseek-harness
- CWE-840
- CWE-841
Not analysed yet 12 Oct 2026
CVE-2026-108784 CVE record

CVSS 6.9 Medium

macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error
- macrozheng mall
- CWE-840
Not analysed yet 12 Oct 2026
CVE-2026-105573 CVE record

CVSS 5.3 Medium

newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error
- newbee-ltd newbee-mall
- CWE-840
Not analysed yet 6 Oct 2026
CVE-2026-77166 CVE record

CVSS 2.4 Low

The emoji field in the page emoji update endpoint does not properly validate user input.
- Nextcloud Collectives
- CWE-840
Not analysed yet 21 Sept 2026
CVE-2026-82982 CVE record

CVSS 4.3 Medium

Nextcloud Approval: The Approval app's approve/reject endpoint is meant to require the file's current etag as…
- Nextcloud Approval
- CWE-840
Not analysed yet 18 Sept 2026
CVE-2026-85030 CVE record

CVSS 6.3 Medium

HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error
- HKUDS AI-Trader
- CWE-840
Not analysed yet 3 Sept 2026
CVE-2026-82423 CVE record

CVSS 5.3 Medium

macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
- macrozheng mall
- CWE-840
- CWE-841
Not analysed yet 29 Aug 2026
CVE-2026-79406 CVE record

CVSS 5.3 Medium

macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error
- macrozheng mall
- CWE-840
Not analysed yet 25 Aug 2026
CVE-2026-75081 CVE record

CVSS 5.3 Medium

Webkul Bagisto store behavioral workflow
- Webkul Bagisto
- CWE-840
- CWE-841
Not analysed yet 17 Aug 2026
CVE-2026-19993 CVE record

CVSS 5.3 Medium

Webkul Bagisto RMA State Validation update-status behavioral workflow
- Webkul Bagisto
- CWE-840
- CWE-841
Not analysed yet 17 Aug 2026
CVE-2026-19213 CVE record

CVSS 5.3 Medium

WonderTrader Pending Order TraderAdapter.h _undone_qty behavioral workflow
- WonderTrader
- CWE-840
- CWE-841
Not analysed yet 7 Aug 2026
CVE-2026-19208 CVE record

CVSS 6.3 Medium

WonderTrader TraderDD.cpp queryTrades behavioral workflow
- WonderTrader
- CWE-840
- CWE-841
Not analysed yet 7 Aug 2026
CVE-2026-19037 CVE record

CVSS 5.3 Medium

WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral workflow
- WonderTrader
- CWE-840
- CWE-841
Not analysed yet 6 Aug 2026
CVE-2026-58558 CVE record

CVSS 7.8 High

Permission control vulnerability in the file system.
- Huawei Harmony OS
- Huawei EMUI
- CWE-840
Not analysed yet 15 Jul 2026
CVE-2026-13571 CVE record

CVSS 6.9 Medium

SourceCodester Simple Food Ordering System cart.php logic error
- SourceCodester Simple Food Ordering System
- CWE-840
Not analysed yet 29 Jun 2026
CVE-2026-41973 CVE record

CVSS 5.9 Medium

Permission control vulnerability in calls.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 9 Jun 2026
github.com/songquanpeng/one-api Go

CVSS 2.3 Low

songquanpeng one-api has an issue that results in business logic errors
- CWE-20
- CWE-840
>=0.1.6-alpha, <=0.6.11-preview.7 · no fixed version yet

GHSA-7v3v-cp44-vc8m · CVE-2026-11465 Not analysed yet 8 Jun 2026
CVE-2026-8738 CVE record

CVSS 6.9 Medium

Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error
- Sanluan PublicCMS
- CWE-840
Not analysed yet 17 May 2026
CVE-2026-41968 CVE record

CVSS 5.9 Medium

Permission control vulnerability in the manufacturability design module.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 15 May 2026
CVE-2026-41967 CVE record

CVSS 5.9 Medium

Permission control vulnerability in the manufacturability design module.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 15 May 2026
CVE-2026-41966 CVE record

CVSS 5.6 Medium

Permission control vulnerability in the smart sensing service.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 15 May 2026
CVE-2026-41961 CVE record

CVSS 5.9 Medium

Permission control vulnerability in contacts.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 15 May 2026
CVE-2026-41971 CVE record

CVSS 5.5 Medium

Permission control vulnerability in the security control module.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 15 May 2026
CVE-2026-41965 CVE record

CVSS 5.6 Medium

Use-After-Free (UAF) vulnerability in the web.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 15 May 2026
CVE-2026-1322 CVE record

CVSS 6.8 Medium

Business Logic Errors in GitLab
- GitLab
- CWE-840
Not analysed yet 14 May 2026
CVE-2026-1274 CVE record

CVSS 4.9 Medium

IBM Guardium Data Protection is affected by multiple vulnerabilities
- IBM Guardium Data Protection
- CWE-840
Not analysed yet 22 Apr 2026
CVE-2026-5812 CVE record

CVSS 5.3 Medium

SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error
- SourceCodester Pharmacy Product Management System
- CWE-840
Not analysed yet 8 Apr 2026
CVE-2026-5811 CVE record

CVSS 5.3 Medium

SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error
- SourceCodester Online Food Ordering System
- CWE-840
Not analysed yet 8 Apr 2026
CVE-2026-4547 CVE record

CVSS 5.3 Medium

mickasmt next-saas-stripe-starter Checkout generate-user-stripe.ts generateUserStripe logic error
- mickasmt next-saas-stripe-starter
- CWE-840
Not analysed yet 22 Mar 2026
CVE-2026-28550 CVE record

CVSS 4.0 Medium

Race condition vulnerability in the security control module.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 5 Mar 2026
CVE-2026-1600 CVE record

CVSS 5.3 Medium

Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic error
- Bdtask Bhojon All-In-One Restaurant Management System
- CWE-840
Not analysed yet 29 Jan 2026
CVE-2026-1599 CVE record

CVSS 5.3 Medium

Bdtask Bhojon All-In-One Restaurant Management System Checkout placeorder logic error
- Bdtask Bhojon All-In-One Restaurant Management System
- CWE-840
Not analysed yet 29 Jan 2026
org.keycloak:keycloak-services Maven

CVSS 6.5 Medium

Keycloak services allows the issuance of access and refresh tokens for disabled users
- Broken access control
- CWE-840
>=26.5.0, <26.5.2 || <26.4.9 · fixed in 26.5.2, 26.4.9

GHSA-wv3h-x6c4-r867 · CVE-2025-14559 Not analysed yet 21 Jan 2026
CVE-2025-13239 CVE record

CVSS 5.3 Medium

Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow
- Bdtask Isshue Multi Store eCommerce Shopping Cart Solution
- CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution
- CWE-840
- CWE-841
Not analysed yet 16 Nov 2025
CVE-2025-6601 CVE record

CVSS 2.7 Low

Business Logic Errors in GitLab
- GitLab
- CWE-840
Not analysed yet 27 Oct 2025
CVE-2025-58289 CVE record

CVSS 5.9 Medium

Vulnerability of improper exception handling in the print module.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 11 Oct 2025
CVE-2025-10868 CVE record

CVSS 3.5 Low

Business Logic Errors in GitLab
- GitLab
- CWE-840
Not analysed yet 26 Sept 2025
CVE-2025-8991 CVE record

CVSS 5.3 Medium

linlinjava litemall Business Logic express logic error
- linlinjava litemall
- CWE-840
Not analysed yet 15 Aug 2025
CVE-2025-54611 CVE record

CVSS 7.3 High

EXTRA_REFERRER resource read vulnerability in the Gallery module.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 6 Aug 2025
CVE-2025-54606 CVE record

CVSS 7.3 High

Status verification vulnerability in the lock screen module.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 6 Aug 2025
CVE-2025-2938 CVE record

CVSS 3.1 Low

Business Logic Errors in GitLab
- GitLab
- CWE-840
Not analysed yet 26 Jun 2025
CVE-2025-4037 CVE record

CVSS 4.8 Medium

code-projects ATM Banking moneyWithdraw logic error
- code-projects ATM Banking
- CWE-840
Not analysed yet 28 Apr 2025
CVE-2025-1908 CVE record

CVSS 7.7 High

Business Logic Errors in GitLab
- GitLab
- CWE-840
Not analysed yet 24 Apr 2025
torchserve PyPI

CVSS 6.3 Medium

TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
- CWE-840
<=0.11.0 · no fixed version yet

GHSA-xx7c-j7h3-vjcq · CVE-2024-6577 Not analysed yet 20 Mar 2025
CVE-2025-2323 CVE record

CVSS 5.3 Medium

274056675 springboot-openai-chatgpt Number of Question questionCou updateQuestionCou behavioral workflow
- 274056675 springboot-openai-chatgpt
- CWE-840
- CWE-841
Not analysed yet 15 Mar 2025
CVE-2025-2321 CVE record

CVSS 5.3 Medium

274056675 springboot-openai-chatgpt addData logic error
- 274056675 springboot-openai-chatgpt
- CWE-840
Not analysed yet 15 Mar 2025
CVE-2024-58046 CVE record

CVSS 6.2 Medium

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 4 Mar 2025
CVE-2024-58043 CVE record

CVSS 7.3 High

Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 4 Mar 2025
CVE-2024-45424 CVE record

CVSS 5.3 Medium

Zoom Workplace Apps - Business Logic Error
- Zoom Communications, Inc Zoom Workplace Apps
- CWE-840
Not analysed yet 25 Feb 2025
magento/community-edition +1 Packagist

CVSS 5.3 Medium

Magento Business Logic Error vulnerability
- CWE-840
<2.4.4-p12 || >=2.4.5-p1, <2.4.5-p11 || >=2.4.6-p1, <2.4.6-p9 || >=2.4.7-beta1, <2.4.7-p4 · fixed in 2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-p4

GHSA-6ff8-jrfg-43hh · CVE-2025-24425 Not analysed yet 11 Feb 2025
CVE-2024-56449 CVE record

CVSS 6.6 Medium

Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 8 Jan 2025
CVE-2024-54098 CVE record

CVSS 8.5 High

Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-840
Not analysed yet 12 Dec 2024
CVE-2024-1682 CVE record

CVSS 4.3 Medium

Unclaimed S3 Bucket Reference in psf/requests Documentation
- psf/requests
- CWE-840
Not analysed yet 14 Nov 2024
CVE-2024-51523 CVE record

CVSS 7.1 High

Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-840
Not analysed yet 5 Nov 2024
CVE-2018-25104 CVE record

CVSS 5.3 Medium

CoinGate Plugin Payment callback.php postProcess logic error
- CoinGate Plugin
- CWE-840
Not analysed yet 17 Oct 2024