CWE-628

10 CVEs classified under CWE-628. Browse by severity and year.

Top CVEs for CWE-628
CVESeverityScorePublishedSummary
CVE-2026-19349Critical9.82026-08-16Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth…
CVE-2026-43133High7.92026-05-06In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM…
CVE-2026-25634High7.82026-02-06iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4…
CVE-2026-104430High7.52026-10-02Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CH…
CVE-2019-14844High7.52019-09-26A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556…
CVE-2019-7303High7.52019-04-23A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host…
CVE-2026-21503Medium6.12026-01-07iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2…
CVE-2025-0325Medium4.32025-06-02A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour conf…
CVE-2026-689072026-10-16libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, chec…
CVE-2026-946362026-10-02Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity…
All CVEs classified under CWE-628 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-689072026-10-16libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, chec…
CVE-2026-946362026-10-02Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity…
CVE-2026-104430High7.52026-10-02Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CH…
CVE-2026-19349Critical9.82026-08-16Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth…
CVE-2026-43133High7.92026-05-06In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM…
CVE-2026-25634High7.82026-02-06iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4…
CVE-2026-21503Medium6.12026-01-07iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2…
CVE-2025-0325Medium4.32025-06-02A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour conf…
CVE-2019-14844High7.52019-09-26A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556…
CVE-2019-7303High7.52019-04-23A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host…