CWE-372

CWE-372 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-372, highest CVSS first.

  1. MEDIUM 4.9CVE-2023-54406public PoC2026-10-12

    Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 4.8CVE-2026-119140public PoC2026-10-29

    Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious components to panic the host via thread.yield in start functions. Attackers can supply a component whose start function calls an async-lower…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-84897public PoC2026-10-07

    src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP (31) and SSH_MSG_KEX_DH_GEX_REPLY (33) when a server receives them from an unauthenticated client. IsMessageAllowedServe…

    AI risk analysis on Exploit-DB.ai →