CWE-792

5 CVEs classified under CWE-792. Browse by severity and year.

Top CVEs for CWE-792
CVESeverityScorePublishedSummary
CVE-2025-47779High7.72025-05-22Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-…
CVE-2025-12758High7.52025-11-27Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() functio…
CVE-2023-25608Medium5.52023-09-13An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1…
CVE-2022-22297Medium5.52023-03-07An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through…
CVE-2023-20057Unrated2023-01-20A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attack…
All CVEs classified under CWE-792 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2025-12758High7.52025-11-27Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() functio…
CVE-2025-47779High7.72025-05-22Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-…
CVE-2023-25608Medium5.52023-09-13An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1…
CVE-2022-22297Medium5.52023-03-07An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through…
CVE-2023-20057Unrated2023-01-20A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attack…