Weakness (CWE)

CWE-912: Hidden Functionality

Class Incomplete

The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

How to prevent it (1 mitigation)

Installation

Always verify the integrity of the product that is being installed.

Source: MITRE CWE-912

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.2

CVE-2025-32370 Public exploit

Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated upl…

Kentico Xperience

Apr 6, 2025
High 7.5

CVE-2024-5633 Public exploit

Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attac…

Longse Technology Zamel LBH30FE200W ZMB-01/C

Jul 9, 2024

CWE-912: Hidden Functionality

Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated upl…

Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attac…