CWE-784

6 CVEs classified under CWE-784. Browse by severity and year.

Top CVEs for CWE-784
CVESeverityScorePublishedSummary
CVE-2023-3050Critical9.82023-06-13Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypas…
CVE-2026-60134High8.82026-07-24Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.
CVE-2026-45055High8.12026-05-13CubeCart is an ecommerce software solution. Prior to 6.7.2, CubeCart 6.6.x – 6.7.1 builds CC_STORE_URL directly from the Host request header at bootstrap, with…
CVE-2020-8184High7.52020-06-19A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker…
CVE-2024-9820Medium6.52024-10-15The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-f…
CVE-2022-3083Low3.92023-02-01All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application navigati…
All CVEs classified under CWE-784 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-60134High8.82026-07-24Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.
CVE-2026-45055High8.12026-05-13CubeCart is an ecommerce software solution. Prior to 6.7.2, CubeCart 6.6.x – 6.7.1 builds CC_STORE_URL directly from the Host request header at bootstrap, with…
CVE-2024-9820Medium6.52024-10-15The WP 2FA with Telegram plugin for WordPress is vulnerable to Two-Factor Authentication Bypass in versions up to, and including, 3.0. This is due to the two-f…
CVE-2023-3050Critical9.82023-06-13Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypas…
CVE-2022-3083Low3.92023-02-01All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrity. The device's web application navigati…
CVE-2020-8184High7.52020-06-19A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker…