CWE-669: CWE-669
Yearly Trend
Top Affected Vendors
All CWE-669 CVEs (17)
This vulnerability allows attackers to bypass two-factor authentication (2FA) in Kaseya VSA by manipulating client-side authentication logic. Attacker...
Jul 9, 2021This vulnerability allows authenticated DAG authors in Apache Airflow 2 to perform remote code execution in the webserver context via an improperly ex...
Dec 17, 2025This vulnerability in Samsung Exynos modem chips allows a crafted application to improperly query SIM card status information. It affects devices usin...
Jun 7, 2023OpenClaw (also known as clawdbot or Moltbot) versions before 2026.1.29 automatically establish WebSocket connections using gatewayUrl values from quer...
Feb 1, 2026This vulnerability in Softwarebuero Zauner ARC 4.2.0.4 allows attackers to escalate privileges within the application because all permission checks ar...
Apr 5, 2022An unauthenticated remote attacker can exploit a demo account in the portal to hijack devices that were mistakenly created in that account. This affec...
May 13, 2025This vulnerability in Plex Media Server allows unauthorized access to server owner credentials and other accessible servers through API endpoints. It ...
Aug 21, 2025This vulnerability in OpenStack Nova allows authenticated users to trigger unsafe image resize operations by writing malicious QCOW headers to root or...
Feb 18, 2026This vulnerability allows attackers to perform cross-domain attacks that could lead to unauthorized access to Wiser Smart energy management systems. I...
Jun 2, 2022Mercku M6a devices allow root TELNET logins using the web admin password, enabling attackers to gain full administrative control. This affects Mercku ...
Oct 22, 2025This vulnerability in One Identity OneLogin exposes OIDC client secrets through the GET Apps API v2, which should only be accessible during initial ap...
Sep 14, 2025This CVE describes a broadcast permission control vulnerability in Bluetooth modules that could allow unauthorized access to Bluetooth services. Succe...
Oct 11, 2023This vulnerability in GNU Guix's guix-daemon allows local users to escalate privileges by writing a malicious content-addressed-mirrors file that crea...
Sep 15, 2025urllib3's CVE-2024-37891 allows the Proxy-Authorization header to leak during cross-origin redirects when configured incorrectly without using urllib3...
Jun 17, 2024This vulnerability allows authenticated low-privileged users in SonarQube to access sensitive user information intended only for administrators, inclu...
Oct 10, 2025This CVE addresses a memory handling issue in the Linux kernel's s390/pkey module where sensitive cryptographic key material might not be properly cle...
Jul 30, 2024XMLUnit for Java versions before 2.10.0, when using default configuration, may allow remote code execution via untrusted XSLT stylesheets. This occurs...
Oct 17, 2025About CWE-669 (CWE-669)
Our database tracks 17 CVEs classified as CWE-669, with 3 rated critical and 9 rated high severity. The average CVSS score for CWE-669 vulnerabilities is 7.4.
External reference: View CWE-669 on MITRE CWE →
Monitor CWE-669 Vulnerabilities
Get alerted when new CWE-669 CVEs affect your infrastructure.
Start Monitoring Free