Weakness (CWE)
CWE-684: Incorrect Provision of Specified Functionality
The code does not function according to its published specifications, potentially leading to incorrect usage.
How to prevent it (1 mitigation)
-
Implementation
Ensure that your code strictly conforms to specifications.
Source: MITRE CWE-684
7 results · Clear filters · Feed
-
Low 3.7
Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload…
-
Low 3.3
uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering
A logic error in the cut utility of uutils coreutils causes the utility to ignore the -s (only-delimited) flag when using the -z (null-terminated) and -d '' (empty delimiter) options together. The implementation incorrectly routes this specific combination th…
-
Low 3.3
uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling
A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the [:graph:] and [:print:] character classes. The implementation mistakenly includes the ASCII space character (0x20) in the [:graph:] class and excludes it from the…
-
Low 3.2
In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginnin…
-
Low 3.7
Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresholds because the rat…
-
Low 2.6
Incorrect Provision of Specified Functionality in GitLab
Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4 prior to 17.4.1 in specific conditions it was possible to disclose to an unauthorised user the path of a private project."
-
Low 3.5
Incorrect Provision of Specified Functionality in qutebrowser
In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow (colors.statusbar.url.warn.fg). However, when the affected websi…