Weakness (CWE)
CWE-691: Insufficient Control Flow Management
The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.
Source: MITRE CWE-691
18 results · Clear filters · Feed
-
Medium 5.5
Foxit PDF Editor/Reader Infinite Loop Denial-of-Service Vulnerability
Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.
-
Medium 6.5
Zoom Clients for iOS - Insufficient Control Flow Management
Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated user to conduct a disclosure of information via network access.
-
Medium 5.7
Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a …
-
Medium 6.5
An issue was discovered in Open5GS v2.7.2. When a UE switches between two gNBs and sends a handover request at a specif…
-
Medium 5.9
Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow i…
-
Medium 6.8
Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticate…
-
Medium 6.5
Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially e…
-
Medium 6.9
Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user …
-
Medium 5.3
Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable…
-
Medium 4.1
Discourse-Jira could make SSRF attack by setting Jira URL to an arbitrary location
Discourse-jira is a Discourse plugin allows Jira projects, issue types, fields and field options will be synced automatically. An administrator user can make an SSRF attack by setting the Jira URL to an arbitrary location and enabling the `discourse_jira_verb…
-
Medium 5.5
Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an …
-
Medium 4.1
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to p…
-
Medium 4.7
Insufficient control flow management in the Intel(R) IPP Cryptography software before version 2021.6 may allow an unaut…
-
Medium 4.7
Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an auth…
-
Medium 5.2
In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible
-
Medium 5.2
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.
-
Medium 6.7
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to p…
-
Medium 6.8
Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to …