Skip to content
OpenAdvisories

Weakness (CWE)

CWE-704: Incorrect Type Conversion or Cast

Class Incomplete

The product does not correctly convert an object, resource, or structure from one type to a different type.

Source: MITRE CWE-704

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2026-28609 Public exploit

    In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to r…

    Google Android Android
  • Critical 9.8
    CVE-2026-15826 Public exploit

    User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter

    The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppb_log_in_user() function calling absint() on the return value of wp_insert_user() before pe…

    Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor Web / CMS
  • Critical 9.3
    CVE-2010-20115 Public exploit

    Vermillion FTP <= 1.31 Daemon PORT Command Memory Corruption

    Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP PORT command. The flaw arises from an out-of-bounds array access during input parsing, allowing an attack…

    Arcane Software Vermillion FTP Daemon
  • Critical 9.8
    CVE-2025-41646 Public exploit EPSS 51%

    RevPi Webstatus application is vulnerable to an authentication bypass

    An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device

    KUNBUS Revolution Pi webstatus
  • High 8.8
    CVE-2022-41828 Public exploit

    com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution

    In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name.

    com.amazon.redshift:redshift-jdbc42 Maven
  • Medium —
    CVE-2013-0233 Public exploit EPSS 14%

    Devise does not properly perform type conversion when performing database queries

    Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incor…

    devise ruby-devise Debian RubyGems