Skip to content
OpenAdvisories

Weakness (CWE)

CWE-941: Incorrectly Specified Destination in a Communication Channel

Base Incomplete

The product creates a communication channel to initiate an outgoing request to an actor, but it does not correctly specify the intended destination for that actor.

Source: MITRE CWE-941

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-69515 Public exploit

    An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to force the infotainment system in…

  • High 8.1
    CVE-2024-29415 Public exploit

    ip SSRF improper categorization in isPublic

    The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of …

    node-ip node-ip ip Debian Ubuntu npm