TYPE DE FAIBLESSE

CWE-840

106 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-840 (en anglais) →

CVE-2021-22897curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel… 5.3 MOYENNE

CVE-2020-8228A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times. 5.3 MOYENNE

CVE-2020-8181A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars. 4.3 MOYENNE

CVE-2019-15608The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading… 5.9 MOYENNE

CVE-2019-3787Les installations de Cloud Foundry UAA antérieures à la version 73.0.0 sont vulnérables à une prise de contrôle de compte si un utilisateur ne dispose pas d'une adresse e-mail conf… 8.3 ÉLEVÉE

CVE-2019-3789Cloud Foundry Routing Release, all versions prior to 0.188.0, contains a vulnerability that can hijack the traffic to route services hosted outside the platform. A user with space … 6.5 MOYENNE