Skip to content
OpenAdvisories

Weakness (CWE)

CWE-351: Insufficient Type Distinction

Base Draft

The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.

Source: MITRE CWE-351

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2025-31951

    HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability

    HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit unauthorized command execution.

    HCL BigFix RunBookAI
  • High 8.7
    CVE-2025-54413

    skops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load time

    skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain an inconsistency in MethodNode, which can be exploited to access unexpected object fields through dot notation. This can be used to a…

    skops-dev skops skops PyPI
  • High 8.7
    CVE-2025-54412

    skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution

    skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the OperatorFuncNode which can be exploited to hide the execution of untrusted operator methods. This can then be …

    skops-dev skops skops PyPI
  • High 7.8
    CVE-2023-38831 Exploited · Ransomware Public exploit EPSS 100%

    RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within …

    KEV Aug 24, 2023
  • High 7.3
    CVE-2023-2866

    Advantech WebAccess Insufficient Type Distinction

    If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.

    Advantech WebAccess/SCADA
  • High 7.5
    CVE-2022-1642

    Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder

    A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch. This vulnerability is caused by the interaction between a deserialization mech…

    Swift Project Swift Corelib-Foundation github.com/apple/swift-corelibs-foundation SwiftURL