cve.bz

CWE-371: State Issues

Filter

Weaknesses in this category are related to improper management of system state.

What the weakness is: CWE-371 at MITRE. All weaknesses

Ask an AI about CWE-371

Show the promptExplain CWE-371: State Issues and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/371.html and https://cve.bz/cve/cwe/371?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.3CVE-2026-124567EPSS 0.2%

    A flaw has been found in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f. This issue affects the function receipt of the file ClientOrderController.java. Executing a manipulation can lead to state issue. The attack may be …

  2. 5.5CVE-2026-82551EPSS 0.5%

    A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_handlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed …

  3. 1.9CVE-2026-14685EPSS 0.2%

    A vulnerability has been found in HdrHistogram up to 2.2.2. This vulnerability affects the function recordValueWithCount of the file src/main/java/org/HdrHistogram/AbstractHistogram.java of the component AbstractHistogram. Such manipulatio…

  4. 8.6CVE-2024-20455EPSS 0.7%

    A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a denial of service (Do…

  5. 7.5CVE-2020-3574EPSS 8.0%

    A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop responding to incoming calls, drop connected calls, or unexpectedly reload. The vulner…

  6. 7.5CVE-2020-3422EPSS 1.3%

    A vulnerability in the IP Service Level Agreement (SLA) responder feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the IP SLA responder to reuse an existing port, resulting in a denial of service (D…

  7. 6.5CVE-2020-3385EPSS 0.5%

    A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insu…

  8. 7.7CVE-2020-3200EPSS 1.7%

    A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to an internal state not be…

  9. 7.5CVE-2019-1977EPSS 1.5%

    A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition …

  10. 6.8CVE-2018-0282EPSS 2.0%

    A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the t…