Falhas do tipo CWE-20

4.681 resultados
CVE-2023-29246HIGHApache OpenMeetings: allows null-byte InjectionEPSS 1.5%CVE-2022-24847HIGHImproper Input Validation in GeoServerEPSS 1.5%CVE-2023-50262MEDIUMDompdf possible DoS caused by infinite recursion when parsing SVG imagesEPSS 1.5%CVE-2019-10937—A vulnerability has been identified in SIMATIC TDC CP51M1 (All versions < V1.1.7). An attacker with network access to the device could causeEPSS 1.5%CVE-2022-24093CRITICALAdobe Commerce post-auth improper input validation leads to remote code executionEPSS 1.5%CVE-2023-39509HIGHA command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary cEPSS 1.5%CVE-2019-1951MEDIUMCisco SD-WAN Solution Packet Filtering Bypass VulnerabilityEPSS 1.5%CVE-2017-7653—The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client could cause other cliEPSS 1.5%CVE-2020-25195—The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when EPSS 1.5%CVE-2020-3170MEDIUMCisco NX-OS Software NX-API Denial of Service VulnerabilityEPSS 1.4%CVE-2022-29169HIGHReDoS on endpoint html5client/useragent in BigBlueButtonEPSS 1.4%CVE-2023-49291CRITICALImproper Sanitization of Branch Name Leads to Arbitrary Code InjectionEPSS 1.4%CVE-2021-1263HIGHCisco SD-WAN Command Injection VulnerabilitiesEPSS 1.4%CVE-2020-3262HIGHCisco Wireless LAN Controller CAPWAP Denial of Service VulnerabilityEPSS 1.4%CVE-2018-15424—Multiple Vulnerabilities in Cisco Identity Services EngineEPSS 1.4%CVE-2022-3157HIGHRockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service AttackEPSS 1.4%CVE-2022-29243MEDIUMImproper input-size validation on the user new session name in Nextcloud ServerEPSS 1.4%CVE-2025-34118HIGHLinknat VOS Manager Path Traversal File DisclosureEPSS 1.4%CVE-2021-1260HIGHCisco SD-WAN Command Injection VulnerabilitiesEPSS 1.4%CVE-2021-1261HIGHCisco SD-WAN Command Injection VulnerabilitiesEPSS 1.4%