Skip to content
OpenAdvisories

Weakness (CWE)

CWE-254: 7PK - Security Features

Category Incomplete Mapping prohibited

Software security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.

Source: MITRE CWE-254

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Medium 5.3
    CVE-2021-43177

    Improper one time password handling in devise-two-factor

    As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one (and only one) immediately trailing interval. CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/…

    Tinfoil devise-two-factor devise-two-factor ruby-devise-two-factor Debian Ubuntu RubyGems
  • Unscored —
    CVE-2021-40006

    Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may …

    Huawei HarmonyOS EMUI Network devices
  • High 7.8
    CVE-2018-6336

    An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing check…

    Facebook osquery
  • Unscored —
    CVE-2018-0353

    A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, r…

  • Unscored —
    CVE-2018-0110

    A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access the remote suppo…

  • Unscored —
    CVE-2017-12353

    A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email S…