CWE-15

94 published CVEs are weaknesses of this kind, as the records or NVD name it.

Newest CVEs

CVE-2026-13292
IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
IBM · MQ
High8.8
CVE-2026-121614
Docker Sandboxes host Git executes repository-controlled programs
Docker · Docker Sandboxes
High7.1
CVE-2026-121427
AzuraCast through 0.23.8 Config Injection via frontend_config.custom_config
AzuraCast · AzuraCast
High8.7
CVE-2025-68403
Inadequate Steps to Confirm Vulnerability in QuRouter
QNAP Systems Inc. · QuRouter
Medium4.6
CVE-2026-110845
n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation
n8n-io · n8n
High7.7
CVE-2026-96188
Microsoft PowerToys Elevation of Privilege Vulnerability
Microsoft · Microsoft PowerToys
High7.3
CVE-2026-73027
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High7.8
CVE-2026-96218
Windows Update Stack Tampering Vulnerability
Microsoft · Windows 10 Version 1809
Medium5.5
CVE-2026-107818
MariaDB: environment injection via wsrep bootstrap in the mariadb.service file
MariaDB · server
High8.4
CVE-2026-107503
In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including the Ditto API URI…
Eclipse Ditto · Ditto Explorer UI
High7.1