CWE-440: Expected Behavior Violation
A feature, API, or function does not perform according to its specification.
A kind of CWE-684 Incorrect Provision of Specified Functionality.
From the CWE List. © The MITRE Corporation.
Newest
- vllm vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense 6.3 Medium
- ibm langflow oss, langflow +1 more Langflow OSS is affected by multiple vulnerabilities 8.8 High
- python urllib3 urllib3: HTTPS proxy TLS configuration may be ignored or overridden 7.6 High
- openssl QUIC Unvalidated Amplification Credit may be Over Accounted 3.7 Low
- silabs.com wisecnnect RS9116W/SiWx917 plaintext pause encryption request causes DOS 7.1 High
- silabs.com bt122 BT122 plaintext pause encryption request causes DOS 7.1 High
- silabs.com bt122 BT122 stops advertising 5.3 Medium
-
uucorecrates.io uutils coreutils: cp/install/mv/ln --suffix alone does not enable backup mode (silent data loss vs GNU) 7.0 High - mitsubishi electric corporation electric melsec iq-f series fx5-enet/ip ethernet module fx5-enet/ip Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet module 8.7 High
- mra13 / team tips and tricks hq stripe payments WordPress Stripe Payments plugin <= 2.0.98 - Bypass Vulnerability vulnerability 6.5 Medium
- indian motorcycle scout bobber + tech Indian Scout Bobber 2025 WCM CAN bus-off attack silently bypasses anti-theft shutdown 4.1 Medium
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more Jostle logic bypass degrades resolution performance 6.9 Medium
- free5gc amf, free5gc +1 more free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransfer 5.5 Medium
- nearform fast-jwt fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS) 5.3 Medium
- openclaw OpenClaw < 2026.4.2 - Insufficient Scope in Zalo Webhook Replay Dedupe Keys 6.3 Medium
- watchguard fireware, fireware os +1 more WatchGuard Firebox System Integrity Check Bypass 6.9 Medium
- watchguard fireware, fireware os +1 more WatchGuard Firebox Boot Time System Integrity Check Bypass 6.7 Medium
- danny-avila danny-avila/librechat, librechat +1 more Insecure API Design in danny-avila/librechat 3.1 Low
- juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset 7.1 High
- llamaindex, run-llama run-llama/llama index +1 more MD5 Hash Collision in run-llama/llama_index 6.5 Medium
- llamaindex, run-llama run-llama/llama index +1 more MD5 Hash Collision in run-llama/llama_index 5.3 Medium
- siemens apogee pxc+talon tc series (bacnet) A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions).... 5.3 Medium
- erlang otp Erlang/OTP SSH Has Strict KEX Violations 3.7 Low
- cjson project cjson cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b":... 2.9 Low
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the... 4.3 Medium
- aws aws/sagemaker-python-sdk MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk 5.9 Medium
- apache traffic server Apache Traffic Server: Expect header field can unreasonably retain resource 4.3 Medium
- enalean tuleap In Tuleap, deleting a report can delete criteria filters in other reports 4.6 Medium
- enalean tuleap Tuleap allows default values to be cleared from field configuration 5.4 Medium
- backstage Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend 5.8 Medium
- palo alto networks cortex xdr agent Cortex XDR Agent: Local Windows Administrator Can Disable the Agent 5.6 Medium
- google grpc HPACK table poisoning in gRPC C++, Python & Ruby 6.3 Medium
- parisneo lollms, parisneo/lollms +1 more Path Traversal in parisneo/lollms 7.3 High
- cloudfoundry foundation uaa UAA Failure to Remove Shadow User’s Access 3.9 Low
- apollographql apollo router, router +1 more Defect in query plan cache may cause incorrect operations to be executed in Apollo Router 9.1 Critical
- enalean tuleap Tuleap deleting or moving an artifact can delete values from unrelated artifacts 7.6 High
- mcginty snow Unauthenticated Nonce Increment in snow 3.1 Low
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem, sinec nms +2 more POLY1305 MAC implementation corrupts vector registers on PowerPC 6.5 Medium
- openssl, siemens sidis prime, simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more POLY1305 MAC implementation corrupts XMM registers on Windows 7.8 High
-
sweetalert2npm sweetalert2 contains potentially undesirable behavior No score - google grpc Information leak in gRPC 7.4 High
- google grpc, fedoraproject fedora +1 more Denial-of-Service in gRPC 5.3 Medium
- redhat openstack A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be... 6.5 Medium
- linux kernel A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could... 5.5 Medium
- wago compact controller cc100, 750-8100 firmware, 750-8101\/000-010 firmware +83 more +85 more WAGO: multiple products - Loss of MAC-Address-Filtering after reboot 7.5 High
- eclipse openj9, eclipse foundation omr, the eclipse foundation eclipse omr +2 more In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for... 9.8 Critical
- linux kernel A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used... 5.5 Medium
- linux kernel A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB ... 5.5 Medium
- linux kernel A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in... 5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 more An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3.... 7.4 High
- Show olderLoading…