CWE-628

7 CVEs classified under CWE-628. Browse by severity and year.

Top CVEs for CWE-628
CVESeverityScorePublishedSummary
CVE-2026-19349Critical9.82026-08-16Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth…
CVE-2026-43133High7.92026-05-06In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM…
CVE-2026-25634High7.82026-02-06iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4…
CVE-2019-14844High7.52019-09-26A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556…
CVE-2019-7303High7.52019-04-23A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host…
CVE-2026-21503Medium6.12026-01-07iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2…
CVE-2025-0325Medium4.32025-06-02A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour conf…
All CVEs classified under CWE-628 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-19349Critical9.82026-08-16Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth…
CVE-2026-43133High7.92026-05-06In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM…
CVE-2026-25634High7.82026-02-06iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4…
CVE-2026-21503Medium6.12026-01-07iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2…
CVE-2025-0325Medium4.32025-06-02A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour conf…
CVE-2019-14844High7.52019-09-26A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556…
CVE-2019-7303High7.52019-04-23A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host…