Skip to content
OpenAdvisories

Weakness (CWE)

CWE-704: Incorrect Type Conversion or Cast

Class Incomplete

The product does not correctly convert an object, resource, or structure from one type to a different type.

Source: MITRE CWE-704

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-15826 Public exploit

    User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter

    The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppb_log_in_user() function calling absint() on the return value of wp_insert_user() before pe…

    Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor Web / CMS
  • Critical 9.3
    CVE-2010-20115 Public exploit

    Vermillion FTP <= 1.31 Daemon PORT Command Memory Corruption

    Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP PORT command. The flaw arises from an out-of-bounds array access during input parsing, allowing an attack…

    Arcane Software Vermillion FTP Daemon
  • Critical 9.8
    CVE-2025-41646 Public exploit EPSS 51%

    RevPi Webstatus application is vulnerable to an authentication bypass

    An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device

    KUNBUS Revolution Pi webstatus