CWE-670 · Always-Incorrect Control Flow Implementation (page 2)
Page 2 of 2 — CVEs classified under CWE-670, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-39354 | Medium | 5.9 | 2022-10-25 | SputnikVM, also called evm, is a Rust implementation of Ethereum Virtual Machine. A custom stateful precompile can use the `is_static` parameter to determine i… |
CVE-2022-26461 | Medium | 6.7 | 2022-09-06 | In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-35917 | Medium | 5.3 | 2022-08-01 | Solana Pay is a protocol and set of reference implementations that enable developers to incorporate decentralized payments into their apps and services. When a… |
CVE-2022-31111 | Medium | 5.3 | 2022-07-06 | Frontier is Substrate's Ethereum compatibility layer. In affected versions the truncation done when converting between EVM balance type and Substrate balance t… |
CVE-2022-31116 | High | 7.5 | 2022-07-05 | UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain charact… |
CVE-2022-31017 | Low | 2.0 | 2022-06-25 | Zulip is an open-source team collaboration tool. Versions 2.1.0 through and including 5.2 are vulnerable to a logic error. A stream configured as private with… |
CVE-2022-29255 | High | 8.2 | 2022-06-09 | Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions prior to 0.3.4 when a calling an external contract with no return val… |
CVE-2022-26890 | High | 7.5 | 2022-05-05 | On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versi… |
CVE-2021-45852 | Medium | 5.3 | 2022-03-16 | An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient… |
CVE-2022-21655 | High | 7.5 | 2022-02-22 | Envoy is an open source edge and service proxy, designed for cloud-native applications. The envoy common router will segfault if an internal redirect selects a… |
CVE-2022-21679 | Medium | 6.8 | 2022-01-19 | Istio is an open platform to connect, manage, and secure microservices. In Istio 1.12.0 and 1.12.1 The authorization policy with hosts and notHosts might be ac… |
CVE-2021-38019 | Medium | 6.5 | 2021-12-23 | Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-43839 | High | 7.5 | 2021-12-21 | Cronos is a commercial implementation of a blockchain. In Cronos nodes running versions before v0.6.5, it is possible to take transaction fees from Cosmos SDK'… |
CVE-2021-43979 | Medium | 5.3 | 2021-11-17 | Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency, sometimes resulting in incorrect access control. The data replication mechanism… |
CVE-2021-41153 | High | 8.7 | 2021-10-18 | The evm crate is a pure Rust implementation of Ethereum Virtual Machine. In `evm` crate `< 0.31.0`, `JUMPI` opcode's condition is checked after the destination… |
CVE-2021-34767 | High | 7.4 | 2021-09-23 | A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unau… |
CVE-2021-37605 | High | 7.5 | 2021-08-05 | In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Chec… |
CVE-2021-37604 | High | 7.5 | 2021-08-05 | In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated… |
CVE-2021-0517 | High | 7.5 | 2021-06-21 | In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead… |
CVE-2021-32684 | Medium | 6.2 | 2021-06-14 | magento-scripts contains scripts and configuration used by Create Magento App, a zero-configuration tool-chain which allows one to deploy Magento 2. In version… |
CVE-2021-0273 | Medium | 5.3 | 2021-04-22 | An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX100… |
CVE-2020-36277 | High | 7.5 | 2021-03-11 | Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c. |
CVE-2021-1236 | Medium | 5.3 | 2021-01-13 | Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypas… |
CVE-2021-3011 | Medium | 4.2 | 2021-01-07 | An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with C… |
CVE-2020-35477 | Medium | 5.3 | 2020-12-18 | MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visi… |
CVE-2020-26506 | Medium | 4.3 | 2020-11-05 | An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploade… |
CVE-2020-1914 | Critical | 9.8 | 2020-10-08 | A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attack… |
CVE-2020-3596 | Medium | 5.9 | 2020-10-08 | A vulnerability in the Session Initiation Protocol (SIP) of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an unau… |
CVE-2020-25603 | High | 7.8 | 2020-09-23 | An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures… |
CVE-2020-25598 | Medium | 5.5 | 2020-09-23 | An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource error path. The RCU (Read, Copy, Update) mechanism is a synchro… |
CVE-2020-17466 | Critical | 9.8 | 2020-08-11 | Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redirect responses. |
CVE-2020-5753 | Medium | 5.3 | 2020-05-20 | Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used… |
CVE-2020-3885 | Medium | 4.3 | 2020-04-01 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iC… |
CVE-2020-9425 | High | 7.5 | 2020-03-20 | An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved cleartext credentials via a GET reques… |
CVE-2019-19324 | High | 7.5 | 2020-03-20 | Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance. |
CVE-2019-20430 | High | 7.5 | 2020-01-27 | In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fi… |
CVE-2014-2686 | High | 7.5 | 2020-01-09 | Ansible prior to 1.5.4 mishandles the evaluation of some strings. |
CVE-2019-19729 | High | 7.5 | 2019-12-11 | An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. ObjectID() allows an attacker to generate a malformed objectid by i… |
CVE-2019-17192 | Critical | 9.8 | 2019-10-05 | The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a callee chooses to… |
CVE-2019-11412 | High | 7.5 | 2019-04-22 | An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid stack-frame jump) because it lacks an ENDTRY opcode call. |
CVE-2019-9946 | High | 7.5 | 2019-04-02 | Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI '… |
CVE-2018-19212 | Medium | 6.5 | 2018-11-12 | In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack. |
CVE-2018-19058 | Medium | 6.5 | 2018-11-07 | An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a… |
CVE-2018-16766 | High | 8.8 | 2018-09-10 | In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecifi… |
CVE-2017-0604 | High | 7.8 | 2017-05-12 | An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the con… |