CWE-27
30 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- 30Published CVEs30 of them scored
- 6Last 12 monthspublished in the last year
- 5Critical13 more rated high
- 1Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2024-23897
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path…
Jenkins Project · Jenkins
ExploitedCritical9.8