CWE-141
12 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 12Published CVEs12 of them scored
- 4Last 12 monthspublished in the last year
- 4Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-66323
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
Medium5.4 - CVE-2026-19594
Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation
Snowflake · Snowflake Python APIs
High8.1 - CVE-2026-20200
Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability
Cisco · Cisco Unified Computing System (Standalone)
High8.8 - CVE-2026-56813
Cookie attribute injection in Plug.Conn.Cookies.encode/2
elixir-plug · plug
Low2.1 - CVE-2023-28815
Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may…
Hikvision · iSecure Center
Critical9.8 - CVE-2025-20338
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands…
Cisco · Cisco IOS XE Software
Medium6.0 - CVE-2025-31329
Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
SAP_SE · SAP NetWeaver Application Server ABAP and ABAP Platform
Medium6.2 - CVE-2024-0840
Grandstream UCM Series IP PBX HTTP Parameter Injection
Grandstream · UCM Series
High8.8 - CVE-2022-41665
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM…
Siemens · SICAM P850
Critical9.8 - CVE-2022-29873
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests.…
Siemens · SICAM T
Critical9.3