Skip to content
OpenAdvisories

Weakness (CWE)

CWE-912: Hidden Functionality

Class Incomplete

The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

How to prevent it (1 mitigation)

  1. Installation

    Always verify the integrity of the product that is being installed.

Source: MITRE CWE-912

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-62773

    Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator.

    Mercku M6a
  • Low 1.9
    CVE-2025-47729 Exploited

    The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signa…

    TeleMessage archiving backend
    KEV May 12, 2025
  • Low 3.3
    CVE-2024-33583

    A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC…

    Siemens SIMATIC RTLS Locating Manager ICS / OT
  • Low 2.7
    CVE-2023-6614

    Typecho Page manage-pages.php backdoor

    A vulnerability classified as problematic was found in Typecho 1.2.1. Affected by this vulnerability is an unknown functionality of the file /admin/manage-pages.php of the component Page Handler. The manipulation leads to backdoor. The attack can be launched …

  • Low —
    GHSA-8jh9-wqpf-q52c

    sweetalert2 v8.19.1 and above contains hidden functionality

    `sweetalert2` versions 8.19.1 and up until 9.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versi…

    sweetalert2 npm
  • Low —
    GHSA-pg98-6v7f-2xfv

    sweetalert2 v9.17.4 and above contains hidden functionality

    `sweetalert2` versions 9.17.4 and up until 10.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in vers…

    sweetalert2 npm
  • Low —
    GHSA-457r-cqc8-9vj9

    sweetalert2 v10.16.10 and above contains hidden functionality

    `sweetalert2` versions 10.16.10 and up until 11.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in ve…

    sweetalert2 npm
  • Low —
    GHSA-qq6h-5g6j-q3cm

    sweetalert2 v11.4.9 and above contains hidden functionality

    `sweetalert2` versions 11.4.9 and above are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versions 11.0.…

    sweetalert2 npm
  • Low —
    GHSA-8gr3-2gjw-jj7g

    Hidden functionality in node-ipc

    The package node-ipc version 9.2.2 is vulnerable to hidden functionality that was introduced by the maintainer. The package uses a dependency that writes a file to disk that does not pertain to the functionality of the package and is not included in versions …

    node-ipc npm