GCVE-110-NCSC-2025-330

Weaknesses (CWE)

CWE-787Out-of-bounds WriteCWE-20Improper Input ValidationCWE-476NULL Pointer DereferenceCWE-407Inefficient Algorithmic ComplexityCWE-400Uncontrolled Resource ConsumptionCWE-129Improper Validation of Array IndexCWE-130Improper Handling of Length Parameter InconsistencyCWE-290Authentication Bypass by SpoofingCWE-674Uncontrolled RecursionCWE-328Use of Weak HashCWE-124Buffer Underwrite ('Buffer Underflow')CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-426Untrusted Search PathCWE-125Out-of-bounds ReadCWE-835Loop with Unreachable Exit Condition ('Infinite Loop')CWE-1333Inefficient Regular Expression ComplexityCWE-197Numeric Truncation ErrorCWE-241Improper Handling of Unexpected Data TypeCWE-416Use After FreeCWE-147Improper Neutralization of Input TerminatorsCWE-415Double FreeCWE-770Allocation of Resources Without Limits or ThrottlingCWE-252Unchecked Return ValueCWE-789Memory Allocation with Excessive Size ValueCWE-23Relative Path TraversalCWE-385Covert Timing ChannelCWE-918Server-Side Request Forgery (SSRF)CWE-1284Improper Validation of Specified Quantity in InputCWE-440Expected Behavior ViolationCWE-122Heap-based Buffer OverflowCWE-284Improper Access ControlCWE-404Improper Resource Shutdown or ReleaseCWE-121Stack-based Buffer OverflowCWE-94Improper Control of Generation of Code ('Code Injection')CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')CWE-253Incorrect Check of Function Return ValueCWE-409Improper Handling of Highly Compressed Data (Data Amplification)

Risk Scores

CVSS 3.1

6.4/10

Medium · CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Oracle	vers:unknown/*	—	—

References

advisory

Browse GCVE Records

74,132 records in the GCVE database · Updated July 20, 2026

No matching records found.