CWE-475 · Other weaknesses
Undefined Behavior for Input to API
14CVEs
SortMost likely exploited
14 CVEs with CWE-475 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-47865A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations.Trend Micro, Inc. · Trend Micro Apex Central · CVSS 7.5 · 2025-06-17 | 7.5 | 2.0% | 2025-06-17 |
| CVE-2020-7925Denial of Service when processing malformed Role namesMongoDB Inc. · MongoDB Server · CVSS 7.5 · 2020-11-23 | 7.5 | 1.7% | 2020-11-23 |
| CVE-2026-42009Gnutls: gnutls: denial of service via dtls packet reordering vulnerabilityRed Hat · gnutls · CVSS 7.5 · 2026-05-18 | 7.5 | 1.3% | 2026-05-18 |
| CVE-2024-20380ClamAV HTML Parser Denial of Service VulnerabilityCisco · ClamAV · CVSS 7.5 · 2024-04-18 | 7.5 | 1.1% | 2024-04-18 |
| CVE-2023-2253A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This…Redhat · distribution/distribution · CVSS 6.5 · 2023-06-06 | 6.5 | 0.9% | 2023-06-06 |
| CVE-2023-4874Undefined Behavior for Input to API in MuttMutt · Mutt · CVSS 4.3 · 2023-09-09 | 4.3 | 0.8% | 2023-09-09 |
| CVE-2024-10569Zip Bomb Vulnerability in gradio-app/gradiogradio-app · gradio-app/gradio · CVSS 7.5 · 2025-03-20 | 7.5 | 0.7% | 2025-03-20 |
| CVE-2026-19311Missing Authorization in Execute Monitor API in OpenSearch Alerting PluginAWS · OpenSearch · CVSS 8.1 · 2026-08-12 | 8.1 | 0.6% | 2026-08-12 |
| CVE-2023-4875Undefined Behavior for Input to API in MuttMutt · Mutt · CVSS 2.2 · 2023-09-09 | 2.2 | 0.6% | 2023-09-09 |
| CVE-2024-3099Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflowmlflow · mlflow/mlflow · CVSS 5.4 · 2024-06-06 | 5.4 | 0.4% | 2024-06-06 |
| CVE-2023-52533In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges n…Unisoc (Shanghai) Technologies Co., Ltd. · T760/T770/T820/S8000 · CVSS 5.3 · 2024-04-08 | 5.3 | 0.4% | 2024-04-08 |
| CVE-2022-29207Undefined behavior when users supply invalid resource handles in TensorFlowtensorflow · tensorflow · CVSS 5.5 · 2022-05-20 | 5.5 | 0.3% | 2022-05-20 |
| CVE-2025-47866An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations.Trend Micro, Inc. · Trend Micro Apex Central · CVSS 4.3 · 2025-06-17 | 4.3 | 0.3% | 2025-06-17 |
| CVE-2026-73797HPE NonStop TSQLFIL - Memory corruption vulnerabilityHewlett Packard Enterprise · HPE NonStop TSQLFIL · CVSS 5.3 · 2026-10-14 | 5.3 | 0.1% | 2026-10-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.