Skip to content
OpenAdvisories

Weakness (CWE)

CWE-436: Interpretation Conflict

Class Incomplete

Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.

Source: MITRE CWE-436

All Critical High Medium Low Exploited only Public exploit

83 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-0011

    PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering

    PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed (depending on your rules) regardless of their associated URL category. This is done by creating a custom URL category list or…

    Palo Alto Networks PAN-OS Prisma Access Network devices
  • Medium 6.5
    CVE-2021-39137

    Consensus flaw during block processing in go-ethereum

    go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the v…

    ethereum go-ethereum github.com/ethereum/go-ethereum Go
  • Medium 4.3
    CVE-2021-21366

    Misinterpretation of malicious XML input

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.4.0 and older do not correctly preserve system identifiers, FPIs or namespaces when repeatedly parsing and serializing maliciously craf…

    xmldom xmldom node-xmldom node-xmldom Debian Ubuntu npm