CWE-235

4 CVEs classified under CWE-235. Browse by severity and year.

Top CVEs for CWE-235
CVESeverityScorePublishedSummary
CVE-2026-27851High7.42026-05-12When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to b…
CVE-2026-20083Medium6.52026-03-25A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to c…
CVE-2024-47651Medium6.52024-10-04This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint. An authenticated remote attacker coul…
CVE-2017-20160Medium6.32022-12-31A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. T…
All CVEs classified under CWE-235 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-27851High7.42026-05-12When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to b…
CVE-2026-20083Medium6.52026-03-25A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to c…
CVE-2024-47651Medium6.52024-10-04This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint. An authenticated remote attacker coul…
CVE-2017-20160Medium6.32022-12-31A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. T…