Falhas do tipo CWE-140

18 resultados
CVE-2023-31208HIGHLivestatus command injection in RestAPIEPSS 1.0%CVE-2023-6157HIGHLivestatus injection in ajax_searchEPSS 0.9%CVE-2023-6156HIGHLivestatus injection in availability timelineEPSS 0.9%CVE-2024-42482MEDIUMfish-shop/syntax-check Improper Neutralization of DelimitersEPSS 0.8%CVE-2023-38488HIGHKirby vulnerable to field injection in the KirbyData text storage handlerEPSS 0.8%CVE-2024-38865MEDIUMLivestatus command injection in RestAPIEPSS 0.6%CVE-2024-6542MEDIUMLivestatus injection in mknotifydEPSS 0.5%CVE-2025-47779HIGHUsing malformed From header can forge identity with ";" or NULL in name portionEPSS 0.4%CVE-2025-32918MEDIUMLivestatus injection in autocomplete endpointEPSS 0.3%CVE-2024-38866MEDIUMLivestatus Injection in dynmapsEPSS 0.3%CVE-2026-21691MEDIUMiccDEV has Type Confusion in CIccTag:IsTypeCompressed()EPSS 0.2%CVE-2025-48879MEDIUMOctoPrint Vulnerable to Denial of Service through malformed HTTP requestEPSS 0.2%CVE-2024-42392MEDIUMImproper Neutralization of Delimiters in Mongoose Web Server libraryEPSS 0.2%CVE-2026-33456MEDIUMPotential livestatus injection in notification testEPSS 0.2%CVE-2026-33455MEDIUMLivestatus injection in monitoring quicksearchEPSS 0.2%CVE-2026-33457MEDIUMPotential livestatus injection in prediction graph pageEPSS 0.2%CVE-2025-52989MEDIUMJunos OS and Junos OS Evolved: Annotate configuration command can be used to change the configurationEPSS 0.1%CVE-2024-42385MEDIUMImproper Neutralization of Delimiters in Mongoose Web Server libraryEPSS 0.1%