CWE-840 (page 2)
Page 2 of 2 — CVEs classified under CWE-840, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22897 | Medium | 5.3 | 2021-06-11 | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is buil… |
CVE-2020-8228 | Medium | 5.3 | 2020-10-05 | A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times. |
CVE-2020-8181 | Medium | 4.3 | 2020-07-10 | A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars. |
CVE-2019-15608 | Medium | 5.9 | 2020-03-15 | The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not comput… |
CVE-2019-3787 | High | 8.3 | 2019-06-19 | Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does no… |
CVE-2019-3789 | Medium | 6.5 | 2019-04-24 | Cloud Foundry Routing Release, all versions prior to 0.188.0, contains a vulnerability that can hijack the traffic to route services hosted outside the platfor… |