CWE-1116
5 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-63345
Refitter: C# source injection through OpenAPI path keys
christianhelle · refitter
High8.6 - CVE-2025-47271
OZI-Project/ozi-publish Code Injection vulnerability
OZI-Project · publish
Medium6.3 - CVE-2025-1219
libxml streams use wrong content-type header when requesting a redirected resource
PHP Group · PHP
Medium6.3 - CVE-2022-30351
PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted information from a supplied PDF file, does…
Product not named
High7.5 - CVE-2022-48339
An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file…
Product not named
High7.8