Skip to content
Noroxi

CWE-115 · 31 records

Misinterpretation of Input

CVEs in this class

31 records

  • CVE-2020-27846
    40Plan

    A signature verification vulnerability exists in crewjam/saml.

    CriticalCVSS 9.8No exploitEPSS 4%

    grafana · grafanaDec 21, 2020

  • CVE-2021-1587
    35Monitor

    Cisco NX-OS Software VXLAN OAM (NGOAM) Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 1%

    cisco · nx-osAug 25, 2021

  • CVE-2025-5747
    32Monitor

    WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of Input Remote Code Execution Vulnerability

    HighCVSS 8.0No exploitEPSS 0%

    wolfbox · level 2 ev charger firmwareJun 6, 2025

  • CVE-2026-73798
    32Monitor

    HPE NonStop DNS 9.2.3 Non Secure Version

    HighCVSS 8.2No exploitEPSS 0%

    hewlett packard enterprise · hpe nonstop dns 9.2.3 non secure versionOct 14, 2026

  • CVE-2018-12116
    31Monitor

    Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provid

    HighCVSS 7.5No exploitEPSS 4%

    nodejs · node.jsNov 28, 2018

  • CVE-2021-0207
    30Monitor

    NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be

    HighCVSS 7.5No exploitEPSS 1%

    juniper · junosJan 15, 2021

  • CVE-2024-11169
    30Monitor

    Unhandled Exception Leading to Server Crash in danny-avila/librechat

    HighCVSS 7.5No exploitEPSS 0%

    librechat · librechatMar 20, 2025

  • CVE-2025-32908
    30Monitor

    Libsoup: denial of service on libsoup through http/2 server

    HighCVSS 7.5No exploitEPSS 0%

    red hat · red hat enterprise linux 10Apr 14, 2025

  • CVE-2022-20915
    29Monitor

    Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability

    HighCVSS 7.4No exploitEPSS 0%

    cisco · ios xeOct 10, 2022

  • CVE-2025-54584
    28Monitor

    GitProxy is vulnerable to a packfile parsing exploit

    HighCVSS 7.0No exploitEPSS 0%

    finos · gitproxyJul 30, 2025

  • CVE-2025-25069
    26Monitor

    Apache Kvrocks: Cross-Protocol Scripting Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    apache · kvrocksFeb 7, 2025

  • CVE-2022-21672
    26Monitor

    /etc/pki/tls and /etc/ssl/certs include distrusted certificates in make-ca

    MediumCVSS 6.5No exploitEPSS 0%

    linuxfromscratch · make-caJan 10, 2022

  • CVE-2025-47906
    26Monitor

    Unexpected paths returned from LookPath in os/exec

    MediumCVSS 6.5No exploitEPSS 0%

    golang · goSep 18, 2025

  • CVE-2025-68113
    26Monitor

    ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

    MediumCVSS 6.5No exploitEPSS 0%

    altcha-org · altcha-libDec 16, 2025

  • CVE-2023-32260
    26Monitor

    A potential Misinterpretation of Input vulnerability has been identified in SMAX, AMX, and HCMX products.

    MediumCVSS 6.5No exploitEPSS 0%

    opentext™ · service management automation x (smax)Mar 19, 2024

  • CVE-2025-5826
    25Monitor

    Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability

    MediumCVSS 6.3No exploitEPSS 0%

    autel · maxicharger ac elite business c50 firmwareJun 25, 2025

  • CVE-2022-1233
    24Monitor

    URL Confusion When Scheme Not Supplied in medialize/uri.js

    MediumCVSS 6.1No exploitEPSS 0%

    uri.js project · uri.jsApr 4, 2022

  • CVE-2022-3224
    24Monitor

    Misinterpretation of Input in ionicabizau/parse-url

    MediumCVSS 6.1No exploitEPSS 0%

    parse-url project · parse-urlSep 15, 2022

  • CVE-2020-29509
    23Monitor

    The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization

    MediumCVSS 5.6No exploitEPSS 2%

    golang · goDec 14, 2020

  • CVE-2020-29510
    23Monitor

    The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-t

    MediumCVSS 5.6No exploitEPSS 2%

    golang · goDec 14, 2020

  • CVE-2020-29511
    23Monitor

    The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization ro

    MediumCVSS 5.6No exploitEPSS 1%

    golang · goDec 14, 2020

  • CVE-2018-7159
    22Monitor

    The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header, allowing input such as `Content-Length: 1

    MediumCVSS 5.3No exploitEPSS 3%

    nodejs · node.jsMay 17, 2018

  • CVE-2026-12491
    19Monitor

    Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations

    MediumCVSS 4.8No exploitEPSS 0%

    vllm-project · vllmJun 17, 2026

  • GHSA-x8xr-mj9x-6h7w
    19Monitor

    Duplicate Advisory: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations

    MediumCVSS 4.8No exploit

    PyPI · vllmJun 17, 2026

  • CVE-2018-12123
    18Monitor

    Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Nod

    MediumCVSS 4.3No exploitEPSS 4%

    nodejs · node.jsNov 28, 2018

All vulnerability classes