Weakness (CWE)
CWE-437: Incomplete Model of Endpoint Features
A product acts as an intermediary or monitor between two or more endpoints, but it does not have a complete model of an endpoint's features, behaviors, or state, potentially causing the product to perform incorrect actions based on this incomplete model.
Source: MITRE CWE-437
5 results · Feed
-
High 7.6
An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory traversal a…
-
High 7.5
Suricata generic detection bypass using TCP urgent support
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgent data (out of band data) can lead to Suricata analyzing data differently than the applications at …
-
Medium 5.0
A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attac…
-
Low 3.7
Failed payment recorded has completed in silverstripe/silverstripe-omnipay
silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways (those that use intermediary states like `isNotification()` or `isRedirect()`), if the payment identifier or success URL is exposed it is po…
-
Unscored —
OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Vers…