CWE-670: Always-Incorrect Control Flow Implementation
The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.
A kind of CWE-691 Insufficient Control Flow Management.
From the CWE List. © The MITRE Corporation.
Newest
- red hat build of keycloak, single sign-on 7 +1 more Keycloak-services: keycloak-services: par single-use bypass via flow restart 5.4 Medium
- xen x86/AMD: ineffectual Zenbleed workaround 9.8 Critical
- mozilla firefox, thunderbird +1 more JIT miscompilation in the JavaScript Engine: JIT component 8.1 High
- asynchttpclient async-http-client AsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept check 3.7 Low
- openbsd openssh In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be... 2.5 Low
- vyperlang vyper Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops 6.3 Medium
- accellion kiteworks, kiteworks core +1 more Missing authentication on a Kiteworks appliance setup function 5.9 Medium
- accellion kiteworks, kiteworks core +1 more Kiteworks Core Missing Authentication for Critical Function 6.5 Medium
- linux, linux kernel +1 more KVM: x86/mmu: Check write tracking in all address spaces 7.1 High
- authlib Authlib library contains a signature‑verification bypass vulnerability 9.8 Critical
- linux, linux kernel +1 more net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times 5.5 Medium
- misp sachertortephp MISP sachertortephp Xml::build() Operator Precedence Bypass Allows Unintended HTTPS SSRF When readFile Is Disabled 5.1 Medium
- arista networks eos Security Advisory 0175 7.1 High
- mintyitanium lost-auction MintyItanium Lost-Auction takes items like barrier blocks out from search GUI 5.3 Medium
- rocq-prover rocq Rocq Prover before 9.2.0 Guard Checker Accepts Fixpoint Passed as a Higher-Order Argument 6.8 Medium
- rocq-prover rocq Rocq Prover through 9.2.0 Guard Checker Trusts Corrupted Recursive Tree After Transport 6.8 Medium
- rocq-prover rocq Rocq Prover 8.20 before 9.2.0 Guard Checker Accepts Non-Terminating Fixpoint via Unchecked Cross-Calls 6.8 Medium
-
perlAlpaquita,libperl5.22TuxCare,libperl5.26TuxCare +6 more +8 more Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass 5.3 Medium - openbsd openssh In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be... 2.5 Low
- intel xeon 6315p firmware, xeon 6325p firmware, xeon 6333p firmware +187 more +189 more Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R)... 4.5 Medium
- mozilla firefox, thunderbird +1 more JIT miscompilation in the JavaScript Engine: JIT component 9.1 Critical
- linux, linux kernel +1 more arm64: tlb: Flush walk cache when unsharing PMD tables 7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Gstreamer1-plugins-bad-free: gstreamer: webrtcbin accepts remote sdp without a=fingerprint due to inverted presence check 3.7 Low
- cap-go capgo Capgo - Integrity Issue in Release Routing via Multiple Public Channels 7.1 High
- zephyrproject zephyr Broken IPv6 Neighbor Discovery input validation allows spoofed RA/NS/NA acceptance in Zephyr net stack 8.1 High
- apache tomcat Apache Tomcat: Logged effective web.xml is incomplete 9.1 Critical
- apache tomcat Apache Tomcat: Bad ornext processing in RewriteValve 7.3 High
- cap-go capgo Cap-go - Broken Cursor Pagination in /private/devices Endpoint 5.3 Medium
- mozilla firefox, thunderbird +1 more JIT miscompilation in the JavaScript: WebAssembly component 5.4 Medium
- bulwarkmail webmail Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic... 7.5 High
- cisco nx-os software Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Denial of Service Vulnerability 6.8 Medium
- uriparser In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal. 2.9 Low
- fohrloop dash-uploader An issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute... 7.5 High
-
github.com/ydb-platform/ydb-go-sdk/v3Go ydb-go-sdk's transactions are not committed using the `options.WithCommit()` option on last call `table.Transaction.Execute` in transaction 2.7 Low - uuidjs uuid Duplicate Advisory: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided 3.2 Low
- uuidjs uuid uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided 8.1 High
- uutils coreutils uutils coreutils cut Inconsistent Output Suppression with Newline Delimiters 3.3 Low
- kde kleopatra KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a... 6.9 Medium
- lm-sys fastchat lm-sys fastchat Arena Side-by-Side View add_text control flow 6.9 Medium
- luanti Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least... 8.1 High
- datasharingframework dsf, dev.dsf dsf-bpe-process-api-v2, dsf-bpe-server +2 more DSF: Inverted Time Comparison in OIDC JWKS and Token Cache 6.3 Medium
- maradns Deadwood in MaraDNS 3.5.0036 allows attackers to exhaust connection slots via a zone whose... 7.5 High
- varnish-software varnish cache, vinyl-cache vinyl cache +1 more Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after... 4.0 Medium
- varnish-software varnish cache, varnish enterprise, vinyl-cache vinyl cache +2 more Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow... 4.0 Medium
- musl-libc musl An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can... 8.1 High
- bytecodealliance wasmtime Wasmtime's host panics when Winch compiler executes `table.fill` 5.9 Medium
- openclaw OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote Onboarding 6.9 Medium
- openbsd openssh OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios... 4.2 Medium
- openbsd openssh OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in... 3.1 Low
- apache traffic server Apache Traffic Server: A simple legitimate POST request causes a crash 7.5 High
- Show olderLoading…