Skip to content
OpenAdvisories

Weakness (CWE)

CWE-344: Use of Invariant Value in Dynamically Changing Context

Base Draft

The product uses a constant value, name, or reference, but this value can (or should) vary across different environments.

Source: MITRE CWE-344

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.3
    CVE-2026-42961

    ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF toke…

    ELECOM WAB-BE72-M WAB-BE36-S WAB-BE187-M
  • High 8.6
    CVE-2023-22746

    CKAN is vulnerable to session secret shared across instances using Docker images

    CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new container based on one of the Docker images listed below, the same secret key was being used by default. If the users didn't set a custom value vi…

    ckan ckan
  • Medium 5.3
    CVE-2022-36022

    Some Deeplearning4J packages use unclaimed s3 bucket in tests and examples

    Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearning4j:dl4j-examples and org.deeplearning4j:platform-tests through version 1.0.0-M2.1 may use some unclaimed S3 buckets in tests in examples…

    eclipse deeplearning4j org.deeplearning4j:dl4j-examples org.deeplearning4j:platform-tests Maven