CWE-670: Always-Incorrect Control Flow Implementation
The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.
A kind of CWE-691 Insufficient Control Flow Management.
From the CWE List. © The MITRE Corporation.
Newest
- snort, cisco firepower threat defense software, ios xe +2 more +4 moreMultiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability4.0 Medium
- ftsafe k13, k21, k40 +42 more +44 moreAn electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security...4.2 Medium
- apache karaf, bouncycastle bc-java, oracle banking corporate lending process management +17 more +19 moreLogic error in Legion of the Bouncy Castle BC Java8.1 High
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one...5.3 Medium
- marmindAn Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0...4.3 Medium
- facebook hermesAlways-Incorrect Control Flow Implementation in Facebook Hermes9.8 Critical
- cisco expressway, telepresence video communication server, telepresence video communication server (vcs) expressway +2 moreCisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability5.9 Medium
- intel biosInsufficient control flow management in BIOS firmware 8th, 9th Generation Intel(R) Core(TM)...5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing...7.8 High
- xen, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource...5.5 Medium
- turcom trcwifizoneTurcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php...9.8 Critical
- signal private messenger, signal +1 moreSignal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non...5.3 Medium
- apple icloud, icloud for windows, ios +7 more +9 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and...4.3 Medium
- rconfigAn issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated...7.5 High
- xmidt cjwtXmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which...7.5 High
- lustreIn the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body...7.5 High
- redhat ansibleAnsible unsafe evaluation of some strings7.5 High
- bson-objectid project bson-objectidbson-objectid contains Improper input validation7.5 High
- signal private messenger** DISPUTED ** The WebRTC component in the Signal Private Messenger application through 4.47.7...9.8 Critical
- chimurai http-proxy-middlewareArbitrary Code Execution in handlebars4.0 Medium
- artifex mujs, fedoraproject fedora +1 moreAn issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid...7.5 High
- cncf portmap, kubernetes, netapp cloud insights +2 moreCloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network...7.5 High
- webmproject libwebmIn libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser()...6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to...6.5 Medium
- webassembly virtual machine project virtual machineIn WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a...8.8 High
- google androidAn elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local...7.8 High
- uglifyjs project uglifyjsIncorrect Handling of Non-Boolean Comparisons During Minification in uglify-js9.8 Critical