CWE-149

5 CVEs classified under CWE-149. Browse by severity and year.

Top CVEs for CWE-149
CVESeverityScorePublishedSummary
CVE-2018-25135Critical9.82025-12-24Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user i…
CVE-2026-42511High8.12026-04-30The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the…
CVE-2025-1094High8.12025-02-13Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() all…
CVE-2025-43878Medium6.02025-05-07When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restri…
CVE-2023-36479Low3.52023-09-15Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have t…
All CVEs classified under CWE-149 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-42511High8.12026-04-30The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the…
CVE-2018-25135Critical9.82025-12-24Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user i…
CVE-2025-43878Medium6.02025-05-07When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restri…
CVE-2025-1094High8.12025-02-13Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() all…
CVE-2023-36479Low3.52023-09-15Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have t…