CWE hub
This hub groups CVEs that NVD maps to CWE-353, so you can review recent disclosures, common vendors, and related weakness patterns in one place.
Mapped CVEs
3
Records currently returned for this weakness id.
Top vendor
getsol
1 mapped CVEs in the aggregate scan.
Top product
db2 recovery expert
1 mapped CVEs in the aggregate scan.
KEV on page
0
Visible rows already present in the CISA KEV catalog.
Top products
Related CWEs
No co-occurring CWE mappings were surfaced in the aggregate scan.
Search results
Showing 1-3 of 3 vulnerabilities.
OpenClaw versions before 2026.4.8 fail to enforce integrity verification on downloaded plugin archives. Attackers can install malicious or tampered plugin packages without detection, compromising the local assistant environment.
CVSS
7.5
HIGH
Published
Apr 28, 2026
IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission.
CVSS
5.3
MEDIUM
Published
Mar 17, 2026
eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by `eopkg`. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by `lseopkg` and related tools. The issue has been fixed in v4.4.0. Users only installing packages from the Solus repositories are not affected.
CVSS
2.0
LOW
Published
Jan 1, 2026
