CWE-472: CWE-472
Yearly Trend
Top Affected Vendors
All CWE-472 CVEs (25)
This vulnerability in fblog allows attackers to take over user accounts by exploiting the password reset feature. Attackers can manipulate the Host HT...
Jul 7, 2025Hashview 0.8.1 contains a critical authentication bypass vulnerability in its password reset functionality. Attackers can take over any user account b...
Jul 7, 2025CVE-2024-25153 is a critical directory traversal vulnerability in FileCatalyst Workflow Web Portal's ftpservlet that allows unauthenticated attackers ...
Mar 13, 2024This critical vulnerability allows unauthenticated remote attackers to execute arbitrary code as root on affected Cisco Small Business VPN routers. At...
Feb 4, 2021This vulnerability allows unauthenticated remote attackers to execute arbitrary code as root on affected Cisco Small Business VPN routers. It affects ...
Feb 4, 2021This critical vulnerability allows unauthenticated remote attackers to execute arbitrary code as root on affected Cisco Small Business VPN routers. At...
Feb 4, 2021This critical vulnerability allows unauthenticated remote attackers to execute arbitrary code as root on affected Cisco Small Business VPN routers. At...
Feb 4, 2021An integer overflow vulnerability in Chrome's V8 JavaScript engine allows remote attackers to trigger heap corruption via malicious HTML pages. This c...
Feb 18, 2026An integer overflow vulnerability in Chrome's V8 JavaScript engine allows remote attackers to trigger heap corruption via malicious HTML pages. This a...
Sep 24, 2025BlueWave Checkmate versions through 2.0.2 before commit b387eba contain an authorization vulnerability where profile edit requests can include a role ...
May 10, 2025This integer overflow vulnerability in Chrome's Skia graphics engine allows remote attackers to trigger heap corruption by luring users to malicious w...
Jan 15, 2025This integer overflow vulnerability in Chrome's layout engine allows remote attackers to trigger heap corruption by crafting malicious HTML pages. Suc...
Nov 27, 2024This vulnerability in Shearwater SecurEnvoy SecurAccess Enrol allows attackers to bypass password authentication by sending only a six-digit TOTP code...
Mar 19, 2025This vulnerability in the Information Kerala Mission SANCHAYA Property Tax Payment Portal allows attackers to modify payment amounts arbitrarily throu...
Mar 10, 2025This vulnerability allows attackers to purchase discontinued products by manipulating requests before they reach the server. It affects Optimizely Con...
Jan 4, 2025The Sylius PayPal Plugin vulnerability allows users to manipulate payment amounts by changing cart quantities after initiating PayPal checkout. PayPal...
Mar 17, 2025This vulnerability allows attackers to manipulate web parameters in the Pinpoint Booking System WordPress plugin, enabling functionality misuse such a...
Jun 4, 2024CVE-2024-50703 is an authorization bypass vulnerability in TeamPass password management software where a user can act with the privileges of a differe...
Dec 30, 2024CVE-2025-35939 is a session file injection vulnerability in Craft CMS where unauthenticated users can inject arbitrary content into server-side sessio...
May 7, 2025The Upsell Funnel Builder for WooCommerce WordPress plugin allows unauthenticated attackers to manipulate order bump products and discounts before pro...
Apr 25, 2025This vulnerability allows remote attackers to bypass security patches and execute downgrade attacks on Mintlify Platform deployments. Attackers can fo...
Dec 19, 2025Synapse Mobility contains a privilege escalation vulnerability where authenticated users can manipulate web parameters in search functions to access u...
Aug 20, 2025This vulnerability in SAP S4CORE allows authenticated attackers to access restricted information through OData meta-data properties due to missing aut...
May 13, 2025This vulnerability allows low-privileged users to manipulate parameters that should be immutable, potentially escalating their privileges to account-l...
Jan 22, 2026This vulnerability allows authenticated non-privileged users in Cerebrate to escalate their privileges by manipulating role_id or organisation_id fiel...
Nov 28, 2025About CWE-472 (CWE-472)
Our database tracks 25 CVEs classified as CWE-472, with 7 rated critical and 8 rated high severity. The average CVSS score for CWE-472 vulnerabilities is 7.8.
External reference: View CWE-472 on MITRE CWE →
Monitor CWE-472 Vulnerabilities
Get alerted when new CWE-472 CVEs affect your infrastructure.
Start Monitoring Free