CWE-480
8 CVEs classified under CWE-480. Browse by severity and year.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-15043 | Critical | 9.8 | 2026-07-14 | DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluat… |
CVE-2026-43114 | Critical | 9.4 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry New test case f… |
CVE-2026-4748 | High | 7.5 | 2026-04-01 | A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) in… |
CVE-2022-1947 | Medium | 6.5 | 2022-05-31 | Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3. |
CVE-2026-44722 | Medium | 6.2 | 2026-07-17 | pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zi… |
CVE-2026-48497 | Medium | 5.9 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in cases where UDP DNS fil… |
CVE-2024-35190 | Medium | 5.8 | 2024-05-17 | Asterisk is an open source private branch exchange and telephony toolkit. After upgrade to 18.23.0, ALL unauthorized SIP requests are identified as PJSIP Endpo… |
CVE-2025-52985 | Medium | 5.3 | 2025-07-11 | A Use of Incorrect Operator vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacke… |