CWE-628

CWE-628 · 3 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-628, highest CVSS first.

  1. HIGH 7.5CVE-2026-104430public PoC2026-10-02

    Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus divergence. Remote at…

    AI risk analysis on Exploit-DB.ai →

  2. UNSCOREDCVE-2026-68907public PoC2026-10-16

    libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtils_copyStringToBuffer while …

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-946362026-10-02

    Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.2…

    AI risk analysis on Exploit-DB.ai →