CWE-684: Incorrect Provision of Specified Functionality
The code does not function according to its published specifications, potentially leading to incorrect usage.
A kind of CWE-710 Improper Adherence to Coding Standards.
From the CWE List. © The MITRE Corporation.
Newest
- google chrome Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0... 4.3 Medium
- google chrome Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155... 6.5 Medium
- google chrome Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to... 5.9 Medium
- zcashfoundation zebra ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser 9.3 Critical
- torproject tor Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a... 3.7 Low
- exim In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the... 5.9 Medium
- exim In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a... 6.5 Medium
- technitium dnsserver Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server... 7.2 High
- uutils coreutils uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering 3.3 Low
- uutils coreutils uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling 3.3 Low
- apache log4j, apache software foundation log4j core +1 more Apache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibility 6.9 Medium
- rustdesk, rustdesk-client rustdesk client +1 more RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation 8.7 High
- rustdesk server, rustdesk-server-pro rustdesk server pro +1 more RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryption 8.7 High
- misp app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for... 8.2 High
- kde skanpage In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the... 3.2 Low
- fortinet fortios An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0... 7.8 High
- akamai rate control Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated... 3.7 Low
- qemu hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related... 4.2 Medium
- scriptcase In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the... 7.5 High
- century systems co., ltd. futurenet nxr-g050 series, futurenet nxr-g060 series, futurenet nxr-g110 series +3 more +5 more FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are... 9.8 Critical
- gitlab Incorrect Provision of Specified Functionality in GitLab 4.3 Medium
- gitlab Incorrect Provision of Specified Functionality in GitLab 2.6 Low
- cisco ios xr software, ios xr +1 more Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability 7.4 High
- gitlab Incorrect Provision of Specified Functionality in GitLab 5.7 Medium
- mesbook Incorrect Provision of Specified Functionality vulnerability in MESbook 9.1 Critical
- openssl, debian linux, netapp h300s firmware +9 more +11 more Incorrect cipher key & IV length processing 7.5 High
- zephyrproject zephyr bt: mesh: vulnerability in provisioning protocol implementation on provisionee side 8.6 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 more Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c 6.5 Medium
- siemens ruggedcom i800, ruggedcom i800nc, ruggedcom i801 +150 more +152 more A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801,... 9.1 Critical
- google android Attacker can reset the device with AT Command in the process of rebooting the device. The LG ID... 6.1 Medium
- qutebrowser, fedoraproject fedora +1 more Incorrect Provision of Specified Functionality in qutebrowser 3.5 Low