CWE-475 · 13 records
Undefined Behavior for Input to API
CVEs in this class
13 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2025-47865No exploit | A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote codetrendmicro · apex central · CWE-475 | Critical9.8 | — | 1.8% | Jun 17, 2025 |
34Monitor | CVE-2026-19311No exploit | Missing Authorization in Execute Monitor API in OpenSearch Alerting Pluginaws · opensearch · CWE-475 | High8.6 | — | 0.6% | Aug 12, 2026 |
31Monitor | CVE-2020-7925No exploit | Denial of Service when processing malformed Role namesmongodb · mongodb · CWE-475 | High7.5 | — | 1.7% | Nov 23, 2020 |
30Monitor | CVE-2026-42009No exploit | Gnutls: gnutls: denial of service via dtls packet reordering vulnerabilitygnu · gnutls · CWE-475 | High7.5 | — | 1.1% | May 18, 2026 |
30Monitor | CVE-2024-20380No exploit | ClamAV HTML Parser Denial of Service Vulnerabilityclamav · clamav · CWE-475 | High7.5 | — | 1.1% | Apr 18, 2024 |
30Monitor | CVE-2024-10569No exploit | Zip Bomb Vulnerability in gradio-app/gradiogradio project · gradio · CWE-475 | High7.5 | — | 0.6% | Mar 20, 2025 |
30Monitor | CVE-2025-47866No exploit | An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrendmicro · apex central · CWE-475 | High7.5 | — | 0.3% | Jun 17, 2025 |
26Monitor | CVE-2023-2253No exploit | A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of recredhat · openshift api for data protection · CWE-475 | Medium6.5 | — | 0.9% | Jun 6, 2023 |
26Monitor | CVE-2023-4874No exploit | Undefined Behavior for Input to API in Muttmutt · mutt · CWE-475 | Medium6.5 | — | 0.8% | Sep 9, 2023 |
22Monitor | CVE-2023-4875No exploit | Undefined Behavior for Input to API in Muttmutt · mutt · CWE-475 | Medium5.7 | — | 0.6% | Sep 9, 2023 |
21Monitor | CVE-2024-3099No exploit | Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflowlfprojects · mlflow · CWE-475 | Medium5.4 | — | 0.4% | Jun 6, 2024 |
21Monitor | CVE-2023-52533No exploit | In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling.google · android · CWE-475 | Medium5.3 | — | 0.4% | Apr 7, 2024 |
10Monitor | GHSA-pq5v-rwp8-p7gmNo exploit | rtvm-interpreter lacks sufficient checks in public APIcrates.io · rtvm-interpreter · CWE-475 | Low2.5 | — | — | Dec 2, 2025 |
- CVE-2025-4786540Plan
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code
CriticalCVSS 9.8No exploitEPSS 2%trendmicro · apex centralJun 17, 2025
- CVE-2026-1931134Monitor
Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin
HighCVSS 8.6No exploitEPSS 1%aws · opensearchAug 12, 2026
- CVE-2020-792531Monitor
Denial of Service when processing malformed Role names
HighCVSS 7.5No exploitEPSS 2%mongodb · mongodbNov 23, 2020
- CVE-2026-4200930Monitor
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
HighCVSS 7.5No exploitEPSS 1%gnu · gnutlsMay 18, 2026
- CVE-2024-2038030Monitor
ClamAV HTML Parser Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%clamav · clamavApr 18, 2024
- CVE-2024-1056930Monitor
Zip Bomb Vulnerability in gradio-app/gradio
HighCVSS 7.5No exploitEPSS 1%gradio project · gradioMar 20, 2025
- CVE-2025-4786630Monitor
An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbi
HighCVSS 7.5No exploitEPSS 0%trendmicro · apex centralJun 17, 2025
- CVE-2023-225326Monitor
A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of rec
MediumCVSS 6.5No exploitEPSS 1%redhat · openshift api for data protectionJun 6, 2023
- CVE-2023-487426Monitor
Undefined Behavior for Input to API in Mutt
MediumCVSS 6.5No exploitEPSS 1%mutt · muttSep 9, 2023
- CVE-2023-487522Monitor
Undefined Behavior for Input to API in Mutt
MediumCVSS 5.7No exploitEPSS 1%mutt · muttSep 9, 2023
- CVE-2024-309921Monitor
Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow
MediumCVSS 5.4No exploitEPSS 0%lfprojects · mlflowJun 6, 2024
- CVE-2023-5253321Monitor
In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling.
MediumCVSS 5.3No exploitEPSS 0%google · androidApr 7, 2024
- GHSA-pq5v-rwp8-p7gm10Monitor
rtvm-interpreter lacks sufficient checks in public API
LowCVSS 2.5No exploitcrates.io · rtvm-interpreterDec 2, 2025