Advisories · Weakness
CWE-941.
Every Advisory and CVE whose sources give the weakness CWE-941, newest first.
- CVSS 7.5 High
IPv6 UDP sendto(2) bypasses jail loopback restriction
- FreeBSD
- CWE-941
- CVSS 5.1 Medium
VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability.
- National Institute of Information and Communications Technology "VoiceTra(Voice Translator)" for Android
- CWE-941
- CVSS 7.2 High
Guzzle: Noncanonical host can bypass host-based checks
- Server-side request forgery (SSRF)
- CWE-180
<7.15.2 || >=8.0.0, <8.0.1 · fixed in 7.15.2, 8.0.1
GHSA-v5mv-p594-2x33 · CVE-2026-69246 - CVSS 8.2 High
Guzzle: Host-only cookie scope is not preserved
- Information disclosure
- CWE-941
<7.15.1 · fixed in 7.15.1
GHSA-wm3w-8rrp-j577 · CVE-2026-67355 - CVSS 5.1 Medium
Arcserve UDP Console: UDP Console provided by Arcserve contains an incorrectly specified destination in a…
- Arcserve UDP Console
- CWE-941
- CVSS 9.1 CriticalCritical · CVSS 9+
An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system into accepting falsified GPS signals as legitimate, resulting in the device report…
- CWE-941
- CVSS 7.2 High
Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel
- kiteworks security-advisories
- CWE-941
- CVSS 3.2 Low
Incorrect calculation in AMD Versal Adaptive SoC Devices and others
- AMD Versal Adaptive SoC Devices
- AMD Versal RF Series
- Information disclosure
- Denial of service
- CVSS 8.3 High
usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos
- CWE-941
<0.9.1 · fixed in 0.9.1
GHSA-r7hg-2cpp-8wqq · CVE-2022-4847 - CVSS 8.1 High
ip SSRF improper categorization in isPublic
- Server-side request forgery (SSRF)
- CWE-941
<=2.0.1 · no fixed version yet
GHSA-2p57-rm9w-gvfp · CVE-2024-29415 - CVSS 9.4 CriticalCritical · CVSS 9+
Quanxun Huiju Network Technology (Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack.
- CWE-941
- CVSS 6.1 Medium
Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API
- tgstation-server
- CWE-941
-
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use may cause the web server to f…
- Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower
- CWE-941