CWE-440 · Input Validation and Logic
Expected Behavior Violation
49CVEs
SortMost likely exploited
49 CVEs with CWE-440 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2019-5108An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP locatio…Linux · Linux kernel · CVSS 7.4 · 2019-12-23 | 7.4 | 10% | 2019-12-23 |
| CVE-2023-6129POLY1305 MAC implementation corrupts vector registers on PowerPCOpenSSL · OpenSSL · CVSS 6.5 · 2024-01-09 | 6.5 | 2.3% | 2024-01-09 |
| CVE-2023-4807POLY1305 MAC implementation corrupts XMM registers on WindowsOpenSSL · OpenSSL · CVSS 7.8 · 2023-09-08 | 7.8 | 1.6% | 2023-09-08 |
| CVE-2018-12550When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty, or contains only comments or blank lines, then Mosquitto will…The Eclipse Foundation · Eclipse Mosquitto · 2019-03-27 | – | 1.4% | 2019-03-27 |
| CVE-2019-6569The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to…Siemens · SCALANCE X204-2 · 2019-03-26 | – | 1.3% | 2019-03-26 |
| CVE-2023-2088A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exp…Redhat · OpenStack · CVSS 6.5 · 2023-05-12 | 6.5 | 1.2% | 2023-05-12 |
| CVE-2019-5061An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required authen…W1.fi · W1.f1 · CVSS 7.4 · 2019-12-12 | 7.4 | 0.9% | 2019-12-12 |
| CVE-2024-56202Apache Traffic Server: Expect header field can unreasonably retain resourceApache Software Foundation · Apache Traffic Server · CVSS 4.3 · 2025-03-06 | 4.3 | 0.9% | 2025-03-06 |
| CVE-2022-3281WAGO: multiple products - Loss of MAC-Address-Filtering after rebootWAGO · 750-81xx/xxx-xxx Series PFC100/PFC200 · CVSS 7.5 · 2022-10-17 | 7.5 | 0.8% | 2022-10-17 |
| CVE-2026-35191QUIC Unvalidated Amplification Credit may be Over AccountedOpenSSL · OpenSSL · CVSS 3.7 · 2026-09-29 | 3.7 | 0.7% | 2026-09-29 |
| CVE-2026-8806Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet moduleMitsubishi Electric Corporation · Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP · CVSS 8.7 · 2026-06-19 | 8.7 | 0.6% | 2026-06-19 |
| CVE-2026-93675Langflow OSS is affected by multiple vulnerabilitiesIBM · Langflow OSS · CVSS 8.8 · 2026-10-07 | 8.8 | 0.6% | 2026-10-07 |
| CVE-2024-30246Tuleap deleting or moving an artifact can delete values from unrelated artifactsEnalean · tuleap · CVSS 7.6 · 2024-03-29 | 7.6 | 0.6% | 2024-03-29 |
| CVE-2026-42534Jostle logic bypass degrades resolution performanceNLnet Labs · Unbound · CVSS 7.5 · 2026-05-20 | 7.5 | 0.6% | 2026-05-20 |
| CVE-2019-5062An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions. By simulating an incomp…W1.fi · W1.f1 · CVSS 7.4 · 2019-12-12 | 7.4 | 0.6% | 2019-12-12 |
| CVE-2025-46712Erlang/OTP SSH Has Strict KEX Violationserlang · otp · CVSS 3.7 · 2025-05-08 | 3.7 | 0.6% | 2025-05-08 |
| CVE-2023-32732Denial-of-Service in gRPCGoogle · gRPC · CVSS 5.3 · 2023-06-09 | 5.3 | 0.5% | 2023-06-09 |
| CVE-2023-32731Information leak in gRPCGoogle · gRPC · CVSS 7.4 · 2023-06-09 | 7.4 | 0.5% | 2023-06-09 |
| CVE-2020-10766A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protec…Linux Kernel · kernel · CVSS 5.5 · 2020-09-15 | 5.5 | 0.5% | 2020-09-15 |
| CVE-2024-47762Unexpected visibility of environment variable configurations in @backstage/plugin-app-backendbackstage · backstage · CVSS 5.8 · 2024-10-03 | 5.8 | 0.4% | 2024-10-03 |
| CVE-2025-8850Insecure API Design in danny-avila/librechatdanny-avila · danny-avila/librechat · CVSS 3.1 · 2025-10-30 | 3.1 | 0.4% | 2025-10-30 |
| CVE-2026-35040fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)nearform · fast-jwt · CVSS 5.3 · 2026-04-09 | 5.3 | 0.4% | 2026-04-09 |
| CVE-2020-10768A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect branch speculation after it has been disabled. This call incor…Linux Kernel · kernel · CVSS 5.5 · 2020-09-15 | 5.5 | 0.4% | 2020-09-15 |
| CVE-2020-10767A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIB…Linux Kernel · kernel · CVSS 5.5 · 2020-09-15 | 5.5 | 0.4% | 2020-09-15 |
| CVE-2025-27094Tuleap allows default values to be cleared from field configurationEnalean · tuleap · CVSS 5.4 · 2025-03-03 | 5.4 | 0.4% | 2025-03-03 |
| CVE-2025-6211MD5 Hash Collision in run-llama/llama_indexrun-llama · run-llama/llama_index · CVSS 6.5 · 2025-07-10 | 6.5 | 0.4% | 2025-07-10 |
| CVE-2026-120982Security Advisory 0207Arista Networks · EOS · CVSS 7.5 · 2026-11-10 | 7.5 | 0.4% | 2026-11-10 |
| CVE-2025-52953Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session resetJuniper Networks · Junos OS · CVSS 6.5 · 2025-07-11 | 6.5 | 0.3% | 2025-07-11 |
| CVE-2025-27401In Tuleap, deleting a report can delete criteria filters in other reportsEnalean · tuleap · CVSS 4.6 · 2025-03-04 | 4.6 | 0.3% | 2025-03-04 |
| CVE-2025-3044MD5 Hash Collision in run-llama/llama_indexrun-llama · run-llama/llama_index · CVSS 5.3 · 2025-07-07 | 5.3 | 0.3% | 2025-07-07 |
| CVE-2026-3344WatchGuard Firebox System Integrity Check BypassWatchGuard · Fireware OS · CVSS 6.9 · 2026-03-03 | 6.9 | 0.3% | 2026-03-03 |
| CVE-2026-121367Security Advisory 0220Arista Networks · EOS · CVSS 9.6 · 2026-11-10 | 9.6 | 0.3% | 2026-11-10 |
| CVE-2026-41136free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransferfree5gc · amf · CVSS 5.5 · 2026-04-21 | 5.5 | 0.3% | 2026-04-21 |
| CVE-2026-27144Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compileGo toolchain · cmd/compile · CVSS 7.1 · 2026-04-08 | 7.1 | 0.3% | 2026-04-08 |
| CVE-2026-114049vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condensevllm-project · vllm · CVSS 3.7 · 2026-10-21 | 3.7 | 0.3% | 2026-10-21 |
| CVE-2026-65932BT122 stops advertisingsilabs.com · BT122 · CVSS 5.3 · 2026-08-13 | 5.3 | 0.3% | 2026-08-13 |
| CVE-2023-26819cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.cJSON Project · cJSON · CVSS 2.9 · 2025-04-19 | 2.9 | 0.2% | 2025-04-19 |
| CVE-2022-3344A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly lea…Linux · Linux kernel · CVSS 5.5 · 2022-10-24 | 5.5 | 0.2% | 2022-10-24 |
| CVE-2026-42752WordPress Stripe Payments plugin <= 2.0.98 - Bypass Vulnerability vulnerabilitymra13 / Team Tips and Tricks HQ · Stripe Payments · CVSS 6.5 · 2026-06-15 | 6.5 | 0.2% | 2026-06-15 |
| CVE-2024-7246HPACK table poisoning in gRPC C++, Python & RubyGoogle · gRPC · CVSS 6.3 · 2024-08-06 | 6.3 | 0.2% | 2024-08-06 |
| CVE-2025-40555A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions). Affected devices start sending unsolicited BACnet broadcast messages after processing a…Siemens · APOGEE PXC+TALON TC Series (BACnet) · CVSS 4.7 · 2025-05-13 | 4.7 | 0.2% | 2025-05-13 |
| CVE-2025-32728In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.OpenBSD · OpenSSH · CVSS 4.3 · 2025-04-10 | 4.3 | 0.2% | 2025-04-10 |
| CVE-2024-8690Cortex XDR Agent: Local Windows Administrator Can Disable the AgentPalo Alto Networks · Cortex XDR Agent · CVSS 5.6 · 2024-09-11 | 5.6 | 0.2% | 2024-09-11 |
| CVE-2026-49316Indian Scout Bobber 2025 WCM CAN bus-off attack silently bypasses anti-theft shutdownIndian Motorcycle · Scout Bobber + Tech · CVSS 4.6 · 2026-05-29 | 4.6 | 0.2% | 2026-05-29 |
| CVE-2025-62621Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially res…AMD · AMD EPYC™ 9005 Series Processors · CVSS 5.9 · 2026-11-10 | 5.9 | 0.2% | 2026-11-10 |
| CVE-2026-65934BT122 plaintext pause encryption request causes DOSsilabs.com · BT122 · CVSS 7.1 · 2026-08-13 | 7.1 | 0.1% | 2026-08-13 |
| CVE-2026-16769RS9116W/SiWx917 plaintext pause encryption request causes DOSsilabs.com · WiseCnnect · CVSS 7.1 · 2026-09-08 | 7.1 | 0.1% | 2026-09-08 |
| CVE-2025-13940WatchGuard Firebox Boot Time System Integrity Check BypassWatchGuard · Fireware OS · CVSS 6.7 · 2025-12-04 | 6.7 | 0.1% | 2025-12-04 |
| CVE-2024-38806UAA Failure to Remove Shadow User’s AccessUAA · CVSS 3.9 · 2024-07-18 | 3.9 | 0.1% | 2024-07-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.