CWE-440 · Expected Behavior Violation

43 CVEs classified under CWE-440 (Expected Behavior Violation). Browse by severity and year.

Top CVEs for CWE-440
CVESeverityScorePublishedSummary
CVE-2021-41035Critical9.82021-10-25In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods.
CVE-2019-6569Critical9.12019-03-26The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could…
CVE-2024-32971Critical9.02024-05-02Apollo Router is a configurable, graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. The affected versions of Apollo Rout…
CVE-2025-8850High8.82025-10-30In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA…
CVE-2018-12550High8.12019-03-27When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty, or contains only comments or blank lines…
CVE-2023-4807High7.82023-09-08Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications on the Window…
CVE-2024-30246High7.62024-03-29Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could exploit this issue on purpose to delete…
CVE-2022-3281High7.52022-10-17WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filteri…
CVE-2023-32731High7.42023-06-09When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be ski…
CVE-2026-42752Medium6.52026-06-15Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions.
CVE-2025-52953Medium6.52025-07-11An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated a…
CVE-2025-6211Medium6.52025-07-10A vulnerability in the DocugamiReader class of the run-llama/llama_index repository, up to version 0.12.28, involves the use of MD5 hashing to generate IDs for…
CVE-2023-6129Medium6.52024-01-09Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on Po…
CVE-2023-2088Medium6.52023-05-12A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticate…
CVE-2019-5108Medium6.52019-12-23An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP…
CVE-2019-5062Medium6.52019-12-12An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions. By…
CVE-2019-5061Medium6.52019-12-12An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before…
CVE-2024-47762Medium5.82024-10-03Backstage is an open framework for building developer portals. Configuration supplied through APP_CONFIG_* environment variables, for example APP_CONFIG_backen…
CVE-2025-13940Medium5.52025-12-04An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity che…
CVE-2022-3344Medium5.52022-10-25A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested gues…
All CVEs classified under CWE-440 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-659342026-08-13An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module.  See vulnerability B-E10 in the related paper below.
CVE-2026-659322026-08-13The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in…
CVE-2026-88062026-06-19Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attack…
CVE-2026-42752Medium6.52026-06-15Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions.
CVE-2026-49316Medium4.62026-05-29Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypas…
CVE-2026-42534Medium5.32026-05-20NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its purpose and degrade resolution performance…
CVE-2026-41136Medium5.32026-04-22free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Prior to…
CVE-2026-35040Medium5.32026-04-09fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.1, using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub…
CVE-2026-3344Medium4.92026-03-03A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a mal…
CVE-2025-13940Medium5.52025-12-04An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity che…
CVE-2025-8850High8.82025-10-30In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA…
CVE-2025-52953Medium6.52025-07-11An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated a…
CVE-2025-6211Medium6.52025-07-10A vulnerability in the DocugamiReader class of the run-llama/llama_index repository, up to version 0.12.28, involves the use of MD5 hashing to generate IDs for…
CVE-2025-3044Medium5.32025-07-07A vulnerability in the ArxivReader class of the run-llama/llama_index repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating…
CVE-2025-40555Medium4.72025-05-13A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions). Affected devices start sending unsolicited BACnet broadcast messages…
CVE-2025-46712Low3.72025-05-08Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2…
CVE-2023-26819Low2.92025-04-19cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,999999999999999999999999999999999999999999999991234567…
CVE-2025-32728Medium4.32025-04-10In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
CVE-2024-56202Medium4.32025-03-06Expected Behavior Violation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.8, from 10.0.0 through 10…
CVE-2025-27401Medium4.62025-03-04Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of Tuleap, the issue has a limited impact…
CVE-2025-27094Medium5.42025-03-03Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-res…
CVE-2024-47762Medium5.82024-10-03Backstage is an open framework for building developer portals. Configuration supplied through APP_CONFIG_* environment variables, for example APP_CONFIG_backen…
CVE-2024-8690Medium4.42024-09-11A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disa…
CVE-2024-7246Medium5.32024-08-06It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see faile…
CVE-2024-38806Low3.92024-07-18Failure to properly synchronize user's permissions in UAA in Cloud Foundry Foundation v40.17.0 https://github.com/cloudfoundry/cf-deployment/releases/tag/v40…
CVE-2024-32971Critical9.02024-05-02Apollo Router is a configurable, graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. The affected versions of Apollo Rout…
CVE-2024-30246High7.62024-03-29Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could exploit this issue on purpose to delete…
CVE-2023-6129Medium6.52024-01-09Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on Po…
CVE-2023-4807High7.82023-09-08Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications on the Window…
CVE-2023-32732Medium5.32023-06-09gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin…
CVE-2023-32731High7.42023-06-09When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be ski…
CVE-2023-2088Medium6.52023-05-12A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticate…
CVE-2022-3344Medium5.52022-10-25A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested gues…
CVE-2022-3281High7.52022-10-17WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filteri…
CVE-2021-41035Critical9.82021-10-25In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods.
CVE-2020-10768Medium5.52020-09-16A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disab…
CVE-2020-10767Medium5.52020-09-15A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will b…
CVE-2020-10766Medium5.52020-09-15A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to…
CVE-2019-5108Medium6.52019-12-23An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP…
CVE-2019-5062Medium6.52019-12-12An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions. By…
CVE-2019-5061Medium6.52019-12-12An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before…
CVE-2018-12550High8.12019-03-27When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty, or contains only comments or blank lines…
CVE-2019-6569Critical9.12019-03-26The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could…