CWE-460

CWE-460 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-460, highest CVSS first.

  1. HIGH 7.5CVE-2026-93710public PoC2026-09-22

    Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks. A hook that dies fires core.app.hook_exception, then calls cleanup unless the failing hook is the exce…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.5CVE-2026-61387public PoC2026-08-04

    In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a `CreateMonitoredItems…

    milo

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.5CVE-2026-96273public PoC2026-09-23

    Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Attackers can craft a malicious program database file that, when imported…

    AI risk analysis on Exploit-DB.ai →