TYPE DE FAIBLESSE

CWE-664

27 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-664 (en anglais) →

CVE-2026-68908Les versions de libIEC61850 antérieures à la version 1.6.2 sont concernées. Cette bibliothèque implémente des protocoles de communication utilisés principalement dans l'automatisat… 5.3 MOYENNE

CVE-2026-57446Les versions 1.6.1 à 1.6.1 de libIEC61850 sont concernées. Cette bibliothèque est utilisée pour implémenter des protocoles de communication industriels, spécifiquement pour les sys… 5.3 MOYENNE

CVE-2026-86203Les serveurs Minecraft PocketMine-MP antérieurs à la version 5.39.2 sont vulnérables à un bug de duplication d'objets. Un joueur peut exploiter une condition de concurrence (race c… 6.3 MOYENNE

CVE-2026-64721Les appareils Apple utilisant iOS, iPadOS, macOS, tvOS, visionOS et watchOS sont concernés. Une application malveillante installée sur l'appareil pourrait accéder à des données uti… 5.5 MOYENNE

CVE-2026-8582Les versions de Google Chrome antérieures à la 148.0.7778.168 sont affectées par une faille de gestion de la mémoire dans l'implémentation Dawn WebGPU. Un attaquant distant peut vo… 5.3 MOYENNE

CVE-2025-54621Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures. 5.3 MOYENNE

CVE-2025-54619Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulnerability may cause iterator failures and affect availability. 5.3 MOYENNE

CVE-2025-54613Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability. 5.9 MOYENNE

CVE-2025-54612Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability. 5.9 MOYENNE

CVE-2024-45383A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially c… 5.0 MOYENNE

CVE-2024-37139Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an Improper Control of a Resource Through its Lifetime vulnerability in an admin oper… 6.5 MOYENNE

CVE-2020-36774plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service (application crash). 5.5 MOYENNE

CVE-2024-23639Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy l… 5.1 MOYENNE

CVE-2024-22365linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY. 5.5 MOYENNE

CVE-2023-44295 Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a resource through its lifetime vulnerability. A low privilege attacker could potentially ex… 6.3 MOYENNE

CVE-2023-25942 Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this … 6.5 MOYENNE

CVE-2022-28287In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash. This vulnerability affects Firefox < 99. 6.5 MOYENNE

CVE-2022-22250An Improper Control of a Resource Through its Lifetime vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved allows unauthenticated adja… 6.5 MOYENNE

CVE-2022-22249An Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated adjac… 6.5 MOYENNE

CVE-2022-31153OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vulnerable to an error that render… 6.5 MOYENNE

CVE-2022-27512Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM. 5.3 MOYENNE

CVE-2022-20748A vulnerability in the local malware analysis process of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service … 5.3 MOYENNE

CVE-2021-1592A vulnerability in the way Cisco UCS Manager software handles SSH sessions could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected… 4.3 MOYENNE

CVE-2020-1622A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore. This issue affects all versions of Junos OS Evo… 5.5 MOYENNE

CVE-2020-1621A local, authenticated user with shell can obtain the hashed values of login passwords via configd traces. This issue affects all versions of Junos OS Evolved prior to 19.3R1. 5.5 MOYENNE

CVE-2020-1620A local, authenticated user with shell can obtain the hashed values of login passwords via configd streamer log. This issue affects all versions of Junos OS Evolved prior to 19.3R1… 5.5 MOYENNE

CVE-2019-16779In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the soc… 5.8 MOYENNE