CWE-146 · 10 records
Improper Neutralization of Expression/Command Delimiters
CVEs in this class
10 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-20329No exploit | Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerabilitycisco · adaptive security appliance software · CWE-146 | Critical9.9 | — | 1.1% | Oct 23, 2024 |
37Monitor | CVE-2023-20128No exploit | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilitiescisco · rv320 firmware · CWE-146 | High7.2 | — | 30.3% | Apr 5, 2023 |
37Monitor | CVE-2023-20117No exploit | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilitiescisco · rv320 firmware · CWE-146 | High7.2 | — | 30.3% | Apr 5, 2023 |
35Monitor | CVE-2025-53192No exploit | Apache Commons OGNL: Expression Injection leading to RCEapache · commons ognl · CWE-146 | High8.8 | — | 0.5% | Aug 18, 2025 |
35Monitor | CVE-2026-22266No exploit | Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerabdell · powerprotect data manager · CWE-146 | High8.8 | — | 0.2% | Feb 19, 2026 |
31Monitor | CVE-2023-20035No exploit | Cisco IOS XE SD-WAN Software Command Injection Vulnerabilitycisco · ios xe sd-wan · CWE-146 | High7.8 | — | 0.2% | Mar 23, 2023 |
29Monitor | CVE-2022-4055No exploit | When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to tfreedesktop · xdg-utils · CWE-146 | High7.4 | — | 0.6% | Nov 18, 2022 |
28Monitor | CVE-2024-20470No exploit | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerabilitycisco · rv340 dual wan gigabit vpn router firmware · CWE-146 | High7.2 | — | 0.6% | Oct 2, 2024 |
26Monitor | CVE-2026-20288No exploit | Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerabilitycisco · unified computing system · CWE-146 | Medium6.5 | — | 0.6% | Aug 5, 2026 |
24Monitor | CVE-2025-20237No exploit | A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software cisco · cisco adaptive security appliance (asa) software · CWE-146 | Medium6.0 | — | 0.1% | Aug 14, 2025 |
- CVE-2024-2032939Monitor
Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability
CriticalCVSS 9.9No exploitEPSS 1%cisco · adaptive security appliance softwareOct 23, 2024
- CVE-2023-2012837Monitor
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities
HighCVSS 7.2No exploitEPSS 30%cisco · rv320 firmwareApr 5, 2023
- CVE-2023-2011737Monitor
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities
HighCVSS 7.2No exploitEPSS 30%cisco · rv320 firmwareApr 5, 2023
- CVE-2025-5319235Monitor
Apache Commons OGNL: Expression Injection leading to RCE
HighCVSS 8.8No exploitEPSS 0%apache · commons ognlAug 18, 2025
- CVE-2026-2226635Monitor
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerab
HighCVSS 8.8No exploitEPSS 0%dell · powerprotect data managerFeb 19, 2026
- CVE-2023-2003531Monitor
Cisco IOS XE SD-WAN Software Command Injection Vulnerability
HighCVSS 7.8No exploitEPSS 0%cisco · ios xe sd-wanMar 23, 2023
- CVE-2022-405529Monitor
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to t
HighCVSS 7.4No exploitEPSS 0%freedesktop · xdg-utilsNov 18, 2022
- CVE-2024-2047028Monitor
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerability
HighCVSS 7.2No exploitEPSS 0%cisco · rv340 dual wan gigabit vpn router firmwareOct 2, 2024
- CVE-2026-2028826Monitor
Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability
MediumCVSS 6.5No exploitEPSS 0%cisco · unified computing systemAug 5, 2026
- CVE-2025-2023724Monitor
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software
MediumCVSS 6.0No exploitEPSS 0%cisco · cisco adaptive security appliance (asa) softwareAug 14, 2025