CWE-146

10 CVEs classified under CWE-146. Browse by severity and year.

Top CVEs for CWE-146
CVESeverityScorePublishedSummary
CVE-2024-20329Critical9.92024-10-23A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating sys…
CVE-2025-53192High8.82025-08-18** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commo…
CVE-2023-20035High7.82023-03-23A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges…
CVE-2022-4055High7.42022-11-19When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that sho…
CVE-2024-20470High7.22024-10-02A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an auth…
CVE-2023-20117High7.22023-04-05Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticate…
CVE-2023-20128High7.22023-04-05Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticate…
CVE-2026-20288Medium6.52026-08-05A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrar…
CVE-2025-20237Medium6.02025-08-14A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an auth…
CVE-2026-22266Medium4.72026-02-19Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST A…
All CVEs classified under CWE-146 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-20288Medium6.52026-08-05A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrar…
CVE-2026-22266Medium4.72026-02-19Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST A…
CVE-2025-53192High8.82025-08-18** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commo…
CVE-2025-20237Medium6.02025-08-14A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an auth…
CVE-2024-20329Critical9.92024-10-23A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating sys…
CVE-2024-20470High7.22024-10-02A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an auth…
CVE-2023-20117High7.22023-04-05Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticate…
CVE-2023-20128High7.22023-04-05Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticate…
CVE-2023-20035High7.82023-03-23A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges…
CVE-2022-4055High7.42022-11-19When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that sho…