TYPE DE FAIBLESSE

CWE-840

60 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-840 (en anglais) →

CVE-2021-4146Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6. 4.3 MOYENNE

CVE-2021-4117yetiforcecrm is vulnerable to Business Logic Errors 4.3 MOYENNE

CVE-2021-4111yetiforcecrm is vulnerable to Business Logic Errors 4.3 MOYENNE

CVE-2021-36012Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a business logic error in the placeOrder graphql mutation. An authenti… 6.5 MOYENNE

CVE-2021-22922When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to… 6.5 MOYENNE

CVE-2021-22897curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel… 5.3 MOYENNE

CVE-2020-8228A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times. 5.3 MOYENNE

CVE-2020-8181A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars. 4.3 MOYENNE

CVE-2019-15608The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading… 5.9 MOYENNE

CVE-2019-3789Cloud Foundry Routing Release, all versions prior to 0.188.0, contains a vulnerability that can hijack the traffic to route services hosted outside the platform. A user with space … 6.5 MOYENNE