CWE-688

4 CVEs classified under CWE-688. Browse by severity and year.

Top CVEs for CWE-688
CVESeverityScorePublishedSummary
CVE-2026-33549Medium6.72026-03-22SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure be…
CVE-2021-33713Medium5.52021-07-13A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a hash function is called with an inco…
CVE-2026-12311Medium4.72026-06-16Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderb…
CVE-2026-768782026-08-19In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the pres…
All CVEs classified under CWE-688 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-768782026-08-19In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the pres…
CVE-2026-12311Medium4.72026-06-16Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderb…
CVE-2026-33549Medium6.72026-03-22SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure be…
CVE-2021-33713Medium5.52021-07-13A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a hash function is called with an inco…