Fallos del tipo CWE-187

9 resultados

CVE-2024-41110CRITICALMoby authz zero length regressionEPSS 16.5%CVE-2022-31802CRITICALPartial string comparison in CODESYS gateway serverEPSS 1.2%CVE-2024-39742HIGHIBM MQ Container authentication bypassEPSS 0.8%CVE-2026-35031CRITICALJellyfin: Potential RCE via subtitle upload path traversal + .strm chainEPSS 0.8%CVE-2026-44837MEDIUMview_component: System Test Entry Point Path Check Allows Sibling Directory EscapeEPSS 0.4%CVE-2026-55602MEDIUMhttp-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypassEPSS 0.4%CVE-2026-34785HIGHRack: Local file inclusion in `Rack::Static` via URL Prefix MatchingEPSS 0.3%CVE-2026-30874LOWOpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege EscalationEPSS 0.3%CVE-2025-23384MEDIUMA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1), RUGGEDCOM RM1224 LTE(4G) NAEPSS 0.3%