CWE-1173
10 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 10Published CVEs10 of them scored
- 4Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120642
CGI versions before 5.00 for Perl return request-derived values untainted under taint mode
CGI
Critical9.1 - CVE-2024-58360
stoatchat before 0.7.8 Unrestricted Account Creation
stoatchat · stoatchat
Medium6.9 - CVE-2026-33454
Apache Camel: Inbound Header Filter Missing in MailHeaderFilterStrategy Allows Remote Code Execution via MIME Header Injection (CVE-2025-30177 Variant)
Apache Software Foundation · Apache Camel
Critical9.4 - CVE-2026-33674
PrestaShop: Improper Use of Validation Framework
PrestaShop · PrestaShop
Low2.0 - CVE-2025-48490
Laravel Rest Api has a Search Validation Bypass
Lomkit · laravel-rest-api
Medium6.6 - CVE-2025-3940
Improper Use of Validation Framework
Tridium · Niagara Framework
Medium5.3 - CVE-2023-30949
CVE-2023-30949
Palantir · com.palantir.slate:slate
Medium4.3 - CVE-2023-29091
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080,…
Product not named
Medium6.8 - CVE-2022-1414
3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and…
3scale-amp-system
High8.8 - CVE-2020-1640
Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.
Juniper Networks · Junos OS
High7.5