CWE-372

11 CVEs classified under CWE-372. Newest first, with CVSS severity, EPSS score and public exploits for each.

Top CVEs for CWE-372
CVESeverityScorePublishedSummary
CVE-2024-22590Critical9.12024-05-28The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten…
CVE-2023-31127Critical9.02023-05-08libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPDM session establishment in libspdm prio…
CVE-2023-4012High7.52023-08-07ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).
CVE-2020-27222High7.52021-02-03In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to…
CVE-2026-41388Medium6.52026-04-28OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values. Attackers ca…
CVE-2026-41340Medium6.52026-04-23OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust in…
CVE-2026-41300Medium6.52026-04-21OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows. Attackers can route g…
CVE-2023-36834Medium6.52023-07-14An Incomplete Internal State Distinction vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series allow…
CVE-2021-25735Medium6.52021-09-06A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vu…
CVE-2026-84897Medium5.32026-10-07src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP (31) and SSH_MSG_KE…
CVE-2023-54406Medium4.92026-10-12Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script exec…
All CVEs classified under CWE-372 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2023-54406Medium4.92026-10-12Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script exec…
CVE-2026-84897Medium5.32026-10-07src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP (31) and SSH_MSG_KE…
CVE-2026-41388Medium6.52026-04-28OpenClaw before 2026.3.31 contains a configuration management vulnerability where startup migration treats empty-array settings as missing values. Attackers ca…
CVE-2026-41340Medium6.52026-04-23OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust in…
CVE-2026-41300Medium6.52026-04-21OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows. Attackers can route g…
CVE-2024-22590Critical9.12024-05-28The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten…
CVE-2023-4012High7.52023-08-07ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3).
CVE-2023-36834Medium6.52023-07-14An Incomplete Internal State Distinction vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series allow…
CVE-2023-31127Critical9.02023-05-08libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPDM session establishment in libspdm prio…
CVE-2021-25735Medium6.52021-09-06A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vu…
CVE-2020-27222High7.52021-02-03In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to…