CWE-696: Incorrect Behavior Order
The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways that may produce resultant weaknesses.
A kind of CWE-691 Insufficient Control Flow Management.
From the CWE List. © The MITRE Corporation.
Newest
- matter-labs era-compiler-solidityZKsync Era evaluation order of Yul function arguments5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300 Series: Firewall filter not blocking egress traffic6.9 Medium
- juniper junosJunos OS: EX4300 Series: Loopback filter not blocking traffic despite having discard term.6.9 Medium
- dnspython, eventlet, fedoraproject fedora +1 more +3 morePotential DoS via the Tudoor mechanism in eventlet and dnspython7.0 High
github.com/cosmos/ibc-goGo,github.com/cosmos/ibc-go/v2Go,github.com/cosmos/ibc-go/v3Go +5 more +7 moreibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks9.1 Critical- gallagher command centre server, command centre +1 moreIncorrect behavior order in the Command Centre Server could allow privileged users to gain...4.3 Medium
- quarkus, red hat build of quarkus, build of quarkus 2.13.9 +1 more +3 moreQuarkus: graphql operations over websockets bypass7.4 High
- vaporIncorrect request error handling triggers server crash in Vapor5.3 Medium
- solarwinds platformSolarWinds Platform Incorrect Behavior Order Vulnerability7.2 High
io.github.skylot:jadx-coreMavenskylot jadx affected by Incorrect Behavior Order in vulnerable dependencyNo score- google protobuf-java, google-protobuf, google-protobuf [jruby gem] +5 more +7 moreDenial of Service of protobuf-java parsing procedure7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.7.5 High
- jose-node-cjs-runtime project jose-node-cjs-runtimePadding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime5.9 Medium
- panva jose-node-esm-runtime, jose-node-cjs-runtime project jose-node-cjs-runtime +1 morePadding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime5.9 Medium
- appsup-dart josePadding Oracle Attack due to Observable Timing Discrepancy in jose5.9 Medium