CWE-670: Always-Incorrect Control Flow Implementation
The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.
A kind of CWE-691 Insufficient Control Flow Management.
From the CWE List. © The MITRE Corporation.
Newest
- github.com/mojocn/base64captcha, mojotv base64captcha +1 moreCaptcha verification bypass in github.com/mojocn/base64Captcha5.3 Medium
- gofiber fiberVulnerability in Ctx.IsFromLocal() in gofiber5.3 Medium
- atom electronContent-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled in Electron7.5 High
- parse-community parse-serverTrigger `beforeFind` not invoked in internal query pipeline in parse-server7.5 High
- vyperlang vyperVyper: incorrect order of evaluation of side effects for some builtins3.7 Low
- vyperlang vyperVyper: reversed order of side effects for some operations3.7 Low
- nokia service router operating system, service router linux +1 moreNokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update...7.5 High
- intel hyperscan libraryInsufficient control flow management in the Hyperscan Library maintained by Intel(R) before...5.5 Medium
- jenkins gradle, jenkins project gradle plugin +1 moreIncorrect control flow in Jenkins Gradle Plugin breaks credentials masking in the build log6.5 Medium
- vyperlang vyperNonpayable default functions are sometimes payable in vyper3.7 Low
- vyperlang vyperVyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value7.5 High
- opennetworking onosAn issue was discovered in ONOS 2.5.1. An intent with the same source and destination shows the...5.3 Medium
- opennetworking onosAn issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source...7.5 High
- opennetworking onosAn issue was discovered in ONOS 2.5.1. IntentManager attempts to install the IPv6 flow rules of...7.5 High
- stargate-bukkitStargate-Bukkit improperly handles vehicles causing data duplication.7.5 High
- cloudbase open vswitch, debian linux, redhat fast datapath +3 more +5 moreA flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will...8.2 High
- qualcomm 9205 lte modem firmware, mdm9205 firmware, qca4004 firmware +5 more +7 moreAlways Incorrect Control Flow Implementation in MODEM9.8 Critical
- amd 2nd gen amd ryzen™ threadripper™ processor, 3rd gen amd ryzen™ threadripper™ processors, athlon gold 3150u firmware +93 more +95 moreInsufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper...8.8 High
- intel administrative tools for intel network adaptersInsufficient control flow management in some Intel(R) Ethernet Controller Administrative Tools...6.3 Medium
- intel battery life diagnostic toolInsufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before...8.2 High
- intel sgx sdkInsufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2...2.5 Low
- trellix data loss prevention (dlp), data loss prevention +1 moreThe protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0....5.9 Medium
- google androidIn onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically...7.3 High
- google androidIn addOrReplacePhoneAccount of PhoneAccountRegistrar.java, there is a possible way to enable a...7.8 High
- zephyrproject zephyrbt: host: Wrong key validation check8.6 High
- google tensorflowSeg fault in `ndarray_tensor_bridge` due to zero and large inputs in Tensorflow4.8 Medium
- hyperledger fabricHyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by...7.5 High
- evm project evmevm has incorrect is_static parameter for custom stateful precompiles5.9 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8791, mt8797 +1 moreIn vow, there is a possible undefined behavior due to an API misuse. This could lead to local...6.7 Medium
- keycloak, redhat single sign-on +1 moreKeycloak's improper input validation allows using email as username5.3 Medium
- solanalabs pay, solana-labs solana-pay +1 moreWeakness in Transfer Validation Logic in @solana/pay5.3 Medium
- parity frontierDiscrepency in transfer value and actual value due to incorrect truncation in Frontier5.3 Medium
- ultrajson, fedoraproject fedora +1 moreIncorrect handling of invalid surrogate pair characters in ujson7.5 High
- zulipExpression Always True vulnerability in Zulip Server2.0 Low
- vyperlang vyperMultiple evaluation of contract address in call in vyper8.2 High
- f5 big-ip advanced waf, asm, and apm, big-ip access policy manager, big-ip advanced web application firewall +1 more +3 moreOn F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior...7.5 High
- projectworlds hospital management system in phpAn issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious...5.3 Medium
- envoyproxy envoyIncorrect handling of internal redirects results in crash in Envoy7.5 High
- istioAuthorization Policy bypass in Istio6.8 Medium
- crypto cronos, ethermint, evmos +2 moreDrainage of FeeCollector's Block Transaction Fees7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote...6.5 Medium
- openpolicyagent gatekeeper** DISPUTED ** Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency,...5.3 Medium
- evm project evmSpecification non-compliance in JUMPI8.7 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability7.4 High
- microchip miwiIn the Microchip MiWi v6.5 software stack, there is a possibility of frame counters being being...7.5 High
- microchip miwiIn the Microchip MiWi v6.5 software stack, there is a possibility of frame counters being...7.5 High
- scandipwa magento-scripts, create-magento-app +1 moreMissing Handler in @scandipwa/magento-scripts6.2 Medium
- google androidIn updateCapabilities of ConnectivityService.java, there is a possible incorrect network state...7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.5.3 Medium
- leptonica, debian linux, fedoraproject fedora +2 moreLeptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left...7.5 High
- Show moreLoading…