CWE-436: Interpretation Conflict
Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.
A kind of CWE-435 Interaction Error.
From the CWE List. © The MITRE Corporation.
Newest
- zulip, zulip zulip-mobile +1 moreCrafted link in Zulip message can cause disclosure of credentials8.0 High
- fossil-scm fossilFossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS...5.5 Medium
- silverstripe silverstripe-omnipayFailed payment recorded has completed in silverstripe/silverstripe-omnipay3.7 Low
- phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 moreA null byte interaction error has been discovered in the code that the telnetd_startup daemon...8.4 High
- golang go, netapp beegfs csi driver, cloud insights telegraf agent +2 more +4 morecmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering6.5 Medium
- giteaCapture-replay in Gitea9.8 Critical
- cisco ios, ios xe +1 moreCisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability7.7 High
- aviatrix controllerAn issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a...9.8 Critical
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software VXLAN OAM (NGOAM) Denial of Service Vulnerability8.6 High
- ethereum go-ethereum, go ethereum +1 moreConsensus flaw during block processing in go-ethereum6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreFirefox incorrectly treated an inline list-item element as a block element, resulting in an out...8.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint foundation 2013 service pack 1 +2 more +4 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.8 High
- xmldom, debian linux +1 moreMisinterpretation of malicious XML input4.3 Medium
- juniper junos, juniper networks junos os +1 moreNFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.7.5 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability5.8 Medium
- cisco ios, ios xe, ios 12.2(58)se +2 moreCisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability7.7 High
- bluetooth core, le +1 moreBluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacks6.3 Medium
- isaacs node-tar, tar +1 morenode-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)6.9 Medium
- abb esomseSOMS: X-Content-Type-Options Header Missing6.1 Medium
- eset cyber security, internet security, mobile security +3 more +5 moreESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression...7.5 High
- eset cyber security, mobile security, nod32 antivirus +2 more +4 moreThe ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an...9.8 Critical
- avast antivirus for linux, antivirus pro, antivirus pro plus +2 moreThe Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects...5.5 Medium
- quickheal antivirus for server, antivirus pro, home security +3 more +5 moreThe Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted...7.8 High
- sophos cloud optix, endpoint protection, intercept x endpoint +3 more +5 moreThe Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP...7.8 High
- f-secure cloud protection for salesforce, email and server security, internet gatekeeper +2 moreThe F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted...5.5 Medium
- eset cyber security, internet security, mobile security +3 more +5 moreESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression...5.5 Medium
- debian linux, oisf suricata +1 moreAn issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature...9.1 Critical
- wp-pdf pdf embedderThe Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF...9.8 Critical
- golang go, arista cloudvision portal, eos +8 more +10 moreGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...7.5 High
- juniper junos, juniper networks junos os +1 moreSRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets7.5 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 morefast-uri vulnerable to host confusion via percent-encoded authority delimiters7.5 High
- frroutingbgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x...6.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of...8.8 High
- flatpak, redhat enterprise linux desktop, enterprise linux server +4 more +6 moreIn dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3,...8.8 High