Weaknesses of type CWE-790
14 resultsCVE-2021-43802CRITICALAdmin privilege escalation and arbitrary code execution via malicious *.etherpad importsEPSS 2.0%CVE-2023-45239—A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker EPSS 1.8%CVE-2024-31616HIGHAn issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version RSR10-01G-T-S_RSR_3.0(1)B9P2, Release(0715EPSS 0.8%CVE-2023-22578CRITICALSequalize - Default support for “raw attributes” when using parenthesesEPSS 0.8%CVE-2024-47984MEDIUMDell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit tEPSS 0.5%CVE-2024-43442MEDIUMStored XSS in System ConfigurationEPSS 0.4%CVE-2024-42416HIGHMultiple issues in ctl(4) CAM Target LayerEPSS 0.4%CVE-2025-0431MEDIUMEnterprise Protection Backslash URL Rewrite BypassEPSS 0.4%CVE-2024-6540MEDIUMInformation exlosure in external interfaceEPSS 0.4%CVE-2024-43443MEDIUMStored XSS in process managementEPSS 0.4%CVE-2026-2328HIGHBackend Access Due to Insufficient Input ValidationEPSS 0.3%CVE-2026-9658HIGHPlack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request pathsEPSS 0.2%CVE-2025-27260HIGHEricsson Indoor Connect 8855 - Improper Filtering of Special Elements VulnerabilityEPSS 0.2%CVE-2025-15576HIGHJail chroot escape via fd exchange with a different jailEPSS 0.1%