CWE-749
224 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 4 of them as exploited in the wild.
- Published CVEs
- 224
- Last 12 months
- 99
- Critical
- 57
- Known exploited
- 4
Critical 57High 104Medium 60Low 3Not scored 0
CVEs per yearBy the year they were published
- 20141
- 20162
- 20172
- 20184
- 20196
- 202013
- 20214
- 20223
- 202318
- 202440
- 202542
- 202686
Known exploitedNewest addition to KEV first
- CVE-2018-19322
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC…
Product not named
ExploitedHigh7.8 - CVE-2010-0738
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before…
Product not named
ExploitedLow3.7 - CVE-2010-1428
The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before…
Product not named
ExploitedMedium5.9 - CVE-2006-1547
ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a…
Product not named
ExploitedHigh7.5
Newest CVEs
- CVE-2026-113363
Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through…
NEC Corporation · WebSAM WinShare
Critical9.3 - CVE-2026-116779
FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
signalwire · freeswitch
Critical9.8 - CVE-2026-92704
SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution
sharpemu · sharpemu
High8.3 - CVE-2026-121145
Insecure Configuration Vulnerability in Tata Motors iRA and iRA.ev mobile application
Tata Motors · Tata Motors iRA 2.0
High7.1 - CVE-2026-44265
Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields
enspirit · elo
High7.4 - CVE-2026-120091
Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host
Temporal Technologies, Inc. · Temporal Server
High8.7 - CVE-2026-119978
Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore
FlowiseAI · Flowise
Critical9.0 - CVE-2026-66088
Unrestricted Command Execution via system.execute
Apereo Foundation · openEQUELLA
Critical9.4 - CVE-2026-118606
Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability
Alpine · iLX-F511
High8.8 - CVE-2026-118602
Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability
Alpine · iLX-F511
High7.8