CWE-649

8 CVEs classified under CWE-649. Newest first, with CVSS severity, EPSS score and public exploits for each.

Top CVEs for CWE-649
CVESeverityScorePublishedSummary
CVE-2024-10772High8.82024-12-06Since the firmware update is not validated, an attacker can install modified firmware on the device. This has a high impact on the availabilty, integrity and c…
CVE-2026-105208High7.72026-10-04ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper…
CVE-2019-3730High7.52019-09-30RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an…
CVE-2010-3300Medium5.92021-06-22It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
CVE-2024-36279Medium5.32024-06-17Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" App versions prior t…
CVE-2025-5323Low3.72025-05-29A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function send_email_change_us…
CVE-2026-951052026-10-06Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with wri…
CVE-2025-413512026-01-28Vulnerability that allows a Padding Oracle Attack to be performed on the Funambol v30.0.0.20 cloud server. The thumbnail display URL allows an attacker to decr…
All CVEs classified under CWE-649 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-951052026-10-06Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with wri…
CVE-2026-105208High7.72026-10-04ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper…
CVE-2025-413512026-01-28Vulnerability that allows a Padding Oracle Attack to be performed on the Funambol v30.0.0.20 cloud server. The thumbnail display URL allows an attacker to decr…
CVE-2025-5323Low3.72025-05-29A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function send_email_change_us…
CVE-2024-10772High8.82024-12-06Since the firmware update is not validated, an attacker can install modified firmware on the device. This has a high impact on the availabilty, integrity and c…
CVE-2024-36279Medium5.32024-06-17Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" App versions prior t…
CVE-2010-3300Medium5.92021-06-22It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
CVE-2019-3730High7.52019-09-30RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an…