VulnSea

CWE-346

CVEs classified under CWE-346, newest first.

131 CVEsRSS

CVE-2025-34291High· 8.8CISA KEVPoC
9mo ago

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a …

▾ Abyssallangflow · langflowEPSS 93%via NVD
CVE-2025-8074Medium· 5.6
9mo ago

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors.

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors.

▾ Sunlitsynology · beedriveEPSS 0.09%via NVD
CVE-2024-32642High· 8.8
9mo ago

Masa CMS is an open source Enterprise Content Management platform

Masa CMS is an open source Enterprise Content Management platform. Prior to 7.2.8, 7.3.13, and 7.4.6, there is vulnerable to host header poisoning which allows account takeover via password reset email. This vulnerability is fixed in 7.2…

▾ Twilightmasacms · masacmsEPSS 0.20%via NVD
CVE-2025-13947High· 7.4PoC
9mo ago

A flaw was found in WebKitGTK

A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify tha…

▾ MidnightEPSS 0.33%via NVD
CVE-2025-20364Medium· 4.3
1y ago

A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker to inject wireless 802.11 action frames with arbitrary information. This vu…

A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker to inject wireless 802.11 action frames with arbitrary information. This vu…

▾ SunlitCisco · Cisco Aironet Access Point Software (IOS XE Controller)EPSS 0.12%via NVD
CVE-2025-10201High· 8.8
1y ago

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation via a crafted HTML page

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

▾ Twilightgoogle · chromeEPSS 0.26%via NVD
CVE-2025-53399None
1y ago

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets (except when the relay is confi…

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets (except when the relay is confi…

▾ SunlitEPSS 6.2%via NVD
CVE-2025-7365High· 7.1
1y ago

A flaw was found in Keycloak

A flaw was found in Keycloak. When an authenticated attacker attempts to merge accounts with another existing account during an identity provider (IdP) login, the attacker will subsequently be prompted to "review profile" information. Th…

▾ Twilightredhat · keycloakEPSS 0.25%via NVD
CVE-2024-1249High· 7.4
2y ago

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly i…

▾ TwilightRed Hat · keycloakEPSS 0.45%via NVD
CVE-2023-40547High· 8.3
2y ago

A remote code execution vulnerability was found in Shim

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a complet…

▾ Twilightredhat · shimEPSS 5.4%via NVD
CVE-2022-25146Medium· 5.3
4y ago

The Remote App module in Liferay Portal Liferay Portal v7.4.3.4 through v7.4.3.8 and Liferay DXP 7.4 before update 5 does not check if the origin of event messages it receives matches the origin of the Remote App, allowing attackers to e…

The Remote App module in Liferay Portal Liferay Portal v7.4.3.4 through v7.4.3.8 and Liferay DXP 7.4 before update 5 does not check if the origin of event messages it receives matches the origin of the Remote App, allowing attackers to e…

▾ Sunlitliferay · digital_experience_platformEPSS 0.45%via NVD
CWE-346 vulnerabilities (CVEs) — page 5 · VulnSea