cve.bz

CWE-705: Incorrect Control Flow Scoping

Filter

The product does not properly return control flow to the proper location after it has completed a task or detected an unusual condition.

What the weakness is: CWE-705 at MITRE

Ask an AI about CWE-705

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-705: Incorrect Control Flow Scoping and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/705.html and https://cve.bz/cve/cwe/705?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2026-120341

    A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function of the file studentdetails.php. The manipulation leads to execution after redirect. Remote exploitation of the attack is…

  2. 7.1CVE-2026-55537EPSS 0.3%

    PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() accepts webhook_url when resolution raises socket.gaierror because the exception path uses except socket.gaierror: pass. JobExecuto…

  3. 6.6CVE-2026-45819EPSS 0.5%

    baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

  4. 3.7CVE-2026-40208EPSS 0.4%

    An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.

  5. 2.1CVE-2026-10271EPSS 0.3%

    A flaw has been found in a4m4 Student-Management-System up to f0c5f6842c5e8c431ff02b5260a565ca844df3a0. The affected element is an unknown function of the file admin/ of the component Admin Endpoint. This manipulation of the argument uid c…

  6. 1.9CVE-2026-3449EPSS 0.1%

    Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used. The Promise remains in a permanently pending state after the signal is aborted, c…

  7. 2.1CVE-2026-3264EPSS 0.5%

    A vulnerability was determined in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. Affected by this issue is some unknown functionality of the component Administrative Interface. Executing a manipulation can lead to execu…

  8. 2.1CVE-2026-3262EPSS 0.5%

    A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. Th…

  9. 8.7CVE-2025-53856EPSS 0.3%

    When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic can cause the Traffic Management Microk…

  10. 6.5CVE-2024-45433EPSS 0.5%

    OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper return control flow after detecting an unusual condit…

  11. 5.5CVE-2025-9848EPSS 0.6%

    A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack ca…