Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). S
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported vers
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality). Supported v
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality). Supported v
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to
Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
Incorrect Behaviour of Views with TCP PROXY Requests
Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions:
Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network.
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions t
Vulnerability in the PeopleSoft Enterprise FIN Grants product of Oracle PeopleSoft (component: Grants). The supported
Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). Th
The Salon Booking System WordPress plugin through 10.30.33 does not perform any capability check or validate an OAuth s
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Com
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The suppo
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The suppor
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or s
A vulnerability has been found in xnx3 wangmarket up to 6.4. The impacted element is the function uploadImage of the fil
A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown functi
A vulnerability was found in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/editsite
A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown funct
A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic
A vulnerability was found in iJason-Liu Books_Manager up to 298ba736387ca37810466349af13a0fdf828e99c. This vulnerability
A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncl
A security flaw has been discovered in code-projects Online Music Site 1.0. Affected by this issue is some unknown funct
A vulnerability has been found in DouPHP up to 1.9. This issue affects some unknown processing of the file /admin/file.p
A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTem
A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown fun
A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functi
A vulnerability was detected in EyouCMS up to 1.7.1. This issue affects the function edit_adminlogo of the file applicat
A vulnerability was identified in Z-BlogPHP 1.7.5. This affects the function App::UnPack of the file /zb_users/plugin/Ap
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Sup
In Mahara before 24.04.10 and 25 before 25.04.1, an institution administrator or institution support administrator on a
A vulnerability was determined in code-projects Online Lot Reservation System 1.0. This impacts an unknown function of t
A vulnerability was identified in code-projects Online Lot Reservation System 1.0. Affected is an unknown function of th
A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PH
A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function save_menu of the file
A weakness has been identified in MacCMS Pro up to 2022.1.3. This vulnerability affects the function install of the file
A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affects unknown code of the file crmeb/crmeb-
A weakness has been identified in Dcat-Admin up to 2.2.3-beta. This impacts the function editorMDUpload of the file /adm
Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF
A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the function FileLibraryControl
A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted is an unknown functi
A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_settings o
Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component: PJM Command Center).
Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).
A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connect_mcp_servers of t
A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function
Frequently Asked Questions
What is CWE-284?
CWE-284 (CWE-284) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-284?
There are 7,306 CVE records associated with CWE-284 in our database. Of these, 877 are critical severity, 2593 are high severity, and 2830 are medium severity.
How can I protect against CWE-284 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-284 using AI-powered security agents.
Detect CWE-284 Vulnerabilities
CyberStrike's AI agents automatically detect cwe-284 vulnerabilities across your infrastructure.
Get Started