Weaknesses of type CWE-625

9 results

CVE-2018-8926HIGHPermissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remEPSS 1.7%CVE-2023-6544MEDIUMKeycloak: authorization bypassEPSS 1.1%CVE-2026-23651MEDIUMMicrosoft ACI Confidential Containers Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2020-8910MEDIUMAuth Bypass in Google's Closure-LibraryEPSS 0.5%CVE-2026-32973HIGHOpenClaw < 2026.3.11 - Exec Allowlist Pattern Overmatch via POSIX Path NormalizationEPSS 0.4%CVE-2026-34763MEDIUMRack: Rack::Directory info disclosure and DoS via unescaped regex interpolationEPSS 0.2%CVE-2026-44587MEDIUMCarrierWave has a denylisted_content_type bypass via Unescaped Regex MetacharactersEPSS 0.2%CVE-2026-34830MEDIUMRack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginxEPSS 0.2%CVE-2026-37737MEDIUMsanic-cors version 2.2.0 and prior contains an improper regular expression in the try_match() function in sanic_cors/core.py that uses re.maEPSS 0.2%