CWE-351: Insufficient Type Distinction
The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- typo3 cms TYPO3 CMS - Unrestricted File Upload in Form Framework 6.3 Medium
- hcl bigfix runbookai HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability 8.8 High
- openclaw OpenClaw < 2026.3.31 - Component Interaction Misclassification in Discord Extension 2.3 Low
- contao Contao is vulnerable to remote code execution in template closures 6.6 Medium
- skops-dev skops skops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load time 8.7 High
- skops-dev skops skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution 8.7 High
- typo3 TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction Layer 5.4 Medium
- growatt cloud portal Growatt Cloud portal Insufficient Type Distinction 9.3 Critical
- dnnsoftware dotnetnuke, dnn.platform +1 more DNN does not check the contents of a file when uploading files 2.6 Low
- strawberry-graphql strawberry Strawberry GraphQL has a type resolution vulnerability 3.7 Low
- ibm cognos controller IBM Cognos Controller file upload 4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 more When importing resources using Web Workers, error messages would distinguish the difference... 5.9 Medium
- rarlab winrar RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to... 7.8 High
- advantech webaccess, webaccess/scada +1 more Advantech WebAccess Insufficient Type Distinction 7.3 High
- apple swift, swift project corelib-foundation +1 more Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder 7.5 High
- bluetooth core, le +1 more Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacks 6.3 Medium
- rusqlite project rusqlite Use after free in rusqlite 9.8 Critical
- rusqlite project rusqlite Improper type usage in rusqlite 9.8 Critical
- rusqlite project rusqlite Data races in rusqlite 8.1 High
- rusqlite project rusqlite Use after free in rusqlite 9.8 Critical
- rusqlite project rusqlite Mishandling of format strings in rusqlite 9.8 Critical
- rusqlite project rusqlite Data races in rusqlite 9.8 Critical
- rusqlite project rusqlite Data races in rusqlite 9.8 Critical
- rusqlite project rusqlite Data races in rusqlite 9.8 Critical