CWE-140
23 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 23Published CVEs23 of them scored
- 9Last 12 monthspublished in the last year
- 0Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-114713
The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any…
UnrealIRCd · UnrealIRCd
High8.6 - CVE-2026-124028
mistral.rs before 0.9.5 Tool Call Injection via mistralrs-core Output Parsers
EricLBuehler · mistral.rs
Low2.3 - CVE-2026-104047
Sssd: sssd: information disclosure via query injection in entra id lookups
Red Hat · Red Hat Enterprise Linux 10
Medium5.3 - CVE-2026-47162
Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
vim · vim
High7.3 - CVE-2026-6322
fast-uri vulnerable to host confusion via percent-encoded authority delimiters
fast-uri · fast-uri
High7.5 - CVE-2026-33457
Potential livestatus injection in prediction graph page
Checkmk GmbH · Checkmk
Medium5.3 - CVE-2026-33456
Potential livestatus injection in notification test
Checkmk GmbH · Checkmk
Medium5.1 - CVE-2026-33455
Livestatus injection in monitoring quicksearch
Checkmk GmbH · Checkmk
Medium5.3 - CVE-2026-21691
iccDEV has Type Confusion in CIccTag:IsTypeCompressed()
InternationalColorConsortium · iccDEV
Medium5.4 - CVE-2025-52989
Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration
Juniper Networks · Junos OS
Medium6.8