Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

CWE-86

11 published CVEs are weaknesses of this kind, as the records or NVD name it.

Newest CVEs

  • CVE-2026-71478

    league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes

    thephpleague · commonmark

    Medium6.1
  • CVE-2026-28417

    Vim has OS Command Injection in netrw

    vim · vim

    Medium4.4
  • CVE-2025-66606

    A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper…

    Yokogawa Electric Corporation · FAST/TOOLS

    Low2.1
  • CVE-2025-20168

    Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability

    Cisco · Cisco Common Services Platform Collector Software

    Medium5.4
  • CVE-2025-20167

    Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability

    Cisco · Cisco Common Services Platform Collector Software

    Medium5.4
  • CVE-2025-20166

    Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability

    Cisco · Cisco Common Services Platform Collector Software

    Medium5.4
  • CVE-2024-10941

    A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126.

    Mozilla · Firefox

    Medium4.3
  • CVE-2021-33158

    Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to…

    Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware

    High7.2
  • CVE-2024-21864

    Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially…

    Intel(R) Arc(TM) & Iris(R) Xe Graphics software

    High7.8
  • CVE-2023-22840

    Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of…

    Intel(R) oneVPL GPU software

    Low3.3