CWE-172

CWE-172 · 3 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-172, highest CVSS first.

  1. HIGH 7.5CVE-2026-106122public PoC2026-10-06

    The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP short…

    rabbitmq java client

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.3CVE-2026-1008912026-09-28

    A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarc_policy_query_dmarc in the library libopendmarc/opendmarc_policy.c of the component Internationalized Domain Name Handler. Such mani…

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.8CVE-2026-104774public PoC2026-10-12

    OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the t:jsDecode transformation in internal/transformations/js_decode.go:64-70 includes the backslash in the octal buffer, causing ParseInt to fail and …

    AI risk analysis on Exploit-DB.ai →