CWE-149
6 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 6Published CVEs6 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119301
Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
AWS · aws-sdk-pandas
Medium5.0 - CVE-2026-42511
Remote code execution via malicious DHCP options
FreeBSD · FreeBSD
High8.1 - CVE-2018-25135
Anviz AIM CrossChex Standard 4.3.6.0 CSV Injection via User Import
Anviz Biometric Technology Co., Ltd. · Anviz AIM CrossChex Standard
Critical9.3 - CVE-2025-43878
F5OS-A/C CLI vulnerability
F5 · F5OS - Appliance
High8.3 - CVE-2025-1094
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
PostgreSQL
High8.1 - CVE-2023-36479
Jetty vulnerable to errant command quoting in CGI Servlet
eclipse · jetty.project
Low3.5