Fallos del tipo CWE-393

8 resultados

CVE-2023-37897HIGHServer-side Template Injection (SSTI) in gravEPSS 2.3%CVE-2025-5987HIGHLibssh: invalid return code for chacha20 poly1305 with openssl backendEPSS 1.4%CVE-2020-5401MEDIUMCloud Foundry GoRouter is vulnerable to cache poisoningEPSS 1.0%CVE-2024-49117HIGHWindows Hyper-V Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-42246HIGHnet-imap vulnerable to STARTTLS stripping via invalid response timingEPSS 0.4%CVE-2025-32414MEDIUMIn libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an iEPSS 0.3%CVE-2026-9058CRITICALImproper Certificate Verification in Szafir SDKEPSS 0.3%CVE-2025-24531MEDIUMIn OpenSC pam_pkcs11 before 0.6.13, pam_sm_authenticate() wrongly returns PAM_IGNORE in many error situations (such as an error triggered byEPSS 0.2%