CWE-140 · 19 records
Improper Neutralization of Delimiters
CVEs in this class
19 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2023-31208No exploit | Livestatus command injection in RestAPIcheckmk · checkmk · CWE-140 | High8.8 | — | 0.9% | May 17, 2023 |
35Monitor | CVE-2023-38488No exploit | Kirby vulnerable to field injection in the KirbyData text storage handlergetkirby · kirby · CWE-140 | High8.8 | — | 0.9% | Jul 27, 2023 |
35Monitor | CVE-2023-6157No exploit | Livestatus injection in ajax_searchcheckmk · checkmk · CWE-140 | High8.8 | — | 0.8% | Nov 22, 2023 |
35Monitor | CVE-2023-6156No exploit | Livestatus injection in availability timelinecheckmk · checkmk · CWE-140 | High8.8 | — | 0.8% | Nov 22, 2023 |
30Monitor | CVE-2024-42392No exploit | Improper Neutralization of Delimiters in Mongoose Web Server librarycesanta · mongoose · CWE-140 | High7.5 | — | 0.2% | Nov 18, 2024 |
28Monitor | CVE-2024-42385No exploit | Improper Neutralization of Delimiters in Mongoose Web Server librarycesanta · mongoose · CWE-140 | High7.0 | — | 0.0% | Nov 18, 2024 |
27Monitor | CVE-2025-52989No exploit | Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configurationjuniper · junos · CWE-140 | Medium6.8 | — | 0.1% | Jul 11, 2025 |
26Monitor | CVE-2024-42482No exploit | fish-shop/syntax-check Improper Neutralization of Delimitersfish-shop · syntax-check · CWE-140 | Medium6.5 | — | 0.8% | Aug 12, 2024 |
26Monitor | CVE-2025-47779No exploit | Using malformed From header can forge identity with ";" or NULL in name portionsangoma · asterisk · CWE-140 | Medium6.5 | — | 0.5% | May 22, 2025 |
26Monitor | CVE-2024-6542No exploit | Livestatus injection in mknotifydcheckmk · checkmk · CWE-140 | Medium6.5 | — | 0.4% | Jul 22, 2024 |
26Monitor | CVE-2025-48879No exploit | OctoPrint Vulnerable to Denial of Service through malformed HTTP requestoctoprint · octoprint · CWE-140 | Medium6.5 | — | 0.2% | Jun 10, 2025 |
24Monitor | CVE-2024-38865No exploit | Livestatus command injection in RestAPIcheckmk · checkmk · CWE-140 | Medium6.0 | — | 0.8% | Apr 10, 2025 |
24Monitor | CVE-2026-104040No exploit | Sssd: sssd: information disclosure via odata injection in entra id lookupsfedoraproject · sssd · CWE-140 | Medium6.1 | — | 0.0% | Oct 6, 2026 |
21Monitor | CVE-2024-38866No exploit | Livestatus Injection in dynmapsnagvis · nagvis · CWE-140 | Medium5.3 | — | 0.4% | May 27, 2025 |
21Monitor | CVE-2025-32918No exploit | Livestatus injection in autocomplete endpointcheckmk · checkmk · CWE-140 | Medium5.3 | — | 0.3% | Jul 4, 2025 |
21Monitor | CVE-2026-33457No exploit | Potential livestatus injection in prediction graph pagecheckmk · checkmk · CWE-140 | Medium5.3 | — | 0.2% | Apr 10, 2026 |
21Monitor | CVE-2026-33455No exploit | Livestatus injection in monitoring quicksearchcheckmk · checkmk · CWE-140 | Medium5.3 | — | 0.2% | Apr 10, 2026 |
21Monitor | CVE-2026-104047No exploit | Sssd: sssd: information disclosure via query injection in entra id lookupsfedoraproject · sssd · CWE-140 | Medium5.3 | — | 0.1% | Oct 6, 2026 |
20Monitor | CVE-2026-33456No exploit | Potential livestatus injection in notification testcheckmk · checkmk · CWE-140 | Medium5.1 | — | 0.3% | Apr 10, 2026 |
- CVE-2023-3120835Monitor
Livestatus command injection in RestAPI
HighCVSS 8.8No exploitEPSS 0%checkmk · checkmkMay 17, 2023
- CVE-2023-3848835Monitor
Kirby vulnerable to field injection in the KirbyData text storage handler
HighCVSS 8.8No exploitEPSS 0%getkirby · kirbyJul 27, 2023
- CVE-2023-615735Monitor
Livestatus injection in ajax_search
HighCVSS 8.8No exploitEPSS 0%checkmk · checkmkNov 22, 2023
- CVE-2023-615635Monitor
Livestatus injection in availability timeline
HighCVSS 8.8No exploitEPSS 0%checkmk · checkmkNov 22, 2023
- CVE-2024-4239230Monitor
Improper Neutralization of Delimiters in Mongoose Web Server library
HighCVSS 7.5No exploitEPSS 0%cesanta · mongooseNov 18, 2024
- CVE-2024-4238528Monitor
Improper Neutralization of Delimiters in Mongoose Web Server library
HighCVSS 7.0No exploitEPSS 0%cesanta · mongooseNov 18, 2024
- CVE-2025-5298927Monitor
Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration
MediumCVSS 6.8No exploitEPSS 0%juniper · junosJul 11, 2025
- CVE-2024-4248226Monitor
fish-shop/syntax-check Improper Neutralization of Delimiters
MediumCVSS 6.5No exploitEPSS 0%fish-shop · syntax-checkAug 12, 2024
- CVE-2025-4777926Monitor
Using malformed From header can forge identity with ";" or NULL in name portion
MediumCVSS 6.5No exploitEPSS 0%sangoma · asteriskMay 22, 2025
- CVE-2024-654226Monitor
Livestatus injection in mknotifyd
MediumCVSS 6.5No exploitEPSS 0%checkmk · checkmkJul 22, 2024
- CVE-2025-4887926Monitor
OctoPrint Vulnerable to Denial of Service through malformed HTTP request
MediumCVSS 6.5No exploitEPSS 0%octoprint · octoprintJun 10, 2025
- CVE-2024-3886524Monitor
Livestatus command injection in RestAPI
MediumCVSS 6.0No exploitEPSS 0%checkmk · checkmkApr 10, 2025
- CVE-2026-10404024Monitor
Sssd: sssd: information disclosure via odata injection in entra id lookups
MediumCVSS 6.1No exploitEPSS 0%fedoraproject · sssdOct 6, 2026
- CVE-2024-3886621Monitor
Livestatus Injection in dynmaps
MediumCVSS 5.3No exploitEPSS 0%nagvis · nagvisMay 27, 2025
- CVE-2025-3291821Monitor
Livestatus injection in autocomplete endpoint
MediumCVSS 5.3No exploitEPSS 0%checkmk · checkmkJul 4, 2025
- CVE-2026-3345721Monitor
Potential livestatus injection in prediction graph page
MediumCVSS 5.3No exploitEPSS 0%checkmk · checkmkApr 10, 2026
- CVE-2026-3345521Monitor
Livestatus injection in monitoring quicksearch
MediumCVSS 5.3No exploitEPSS 0%checkmk · checkmkApr 10, 2026
- CVE-2026-10404721Monitor
Sssd: sssd: information disclosure via query injection in entra id lookups
MediumCVSS 5.3No exploitEPSS 0%fedoraproject · sssdOct 6, 2026
- CVE-2026-3345620Monitor
Potential livestatus injection in notification test
MediumCVSS 5.1No exploitEPSS 0%checkmk · checkmkApr 10, 2026