CWE-158 · 31 records

Improper Neutralization of Null Byte or NUL Character

CVEs in this class

31 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
98Now	CVE-2025-47812Weaponized	In Wing FTP Server before 7.4.4.wftpserver · wing ftp server · CWE-158 pre-auth RCE	Critical10.0	KEV	93.9%	Jul 10, 2025
80Now	CVE-2009-1537Weaponized	Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows microsoft · directx · CWE-158 pre-auth RCE	High8.8	KEV	51.2%	May 29, 2009
39Monitor	CVE-2020-14500No exploit	IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158secomea · gatemanager 8250 firmware · CWE-158 Pre-auth	Critical9.8	—	1.7%	Aug 25, 2020
39Monitor	CVE-2023-5719No exploit	Red Lion Crimson Improper Neutralization of Null Byte or NUL Characterredlion · crimson · CWE-158 Pre-auth	Critical9.8	—	0.5%	Nov 6, 2023
39Monitor	CVE-2025-14388No exploit	PhastPress <= 3.7 - Unauthenticated Arbitrary File Read via Null Byte Injectionkiboit · phastpress · CWE-158 Pre-auth	Critical9.8	—	0.5%	Dec 23, 2025
38Monitor	CVE-2025-55113No exploit	BMC Control-M/Agent unescaped NULL byte in access control list checksbmc · control-m\/agent · CWE-158 Pre-auth	Critical9.5	—	0.3%	Sep 16, 2025
35Monitor	CVE-2025-66263No exploit	Unauthenticated Arbitrary File Read via Null Byte Injectiondbbroadcast · mozart next 3000 firmware · CWE-158 Pre-auth	High8.9	—	0.4%	Nov 25, 2025
34Monitor	CVE-2025-9648No exploit	Denial of Service in CivetWebcivetweb · civetweb · CWE-158 Pre-auth	High8.7	—	0.8%	Sep 29, 2025
34Monitor	CVE-2026-33191No exploit	free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Errorfree5gc · udm · CWE-158 Pre-auth	High8.7	—	0.6%	Mar 20, 2026
32Monitor	CVE-2024-10921No exploit	Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Servermongodb · mongodb · CWE-158	High8.1	—	0.6%	Nov 14, 2024
32Monitor	CVE-2026-76354No exploit	Path Traversal through Search Head Clustering in Splunk Enterprisesplunk · splunk · CWE-158 Path traversal	High8.1	—	0.4%	Aug 19, 2026
31Monitor	CVE-2026-92705No exploit	Aegisub executes arbitrary code through automatically loaded Automation scriptstypesettingtools · aegisub · CWE-158 RCE Local privilege escalation	High7.8	—	0.1%	5 days ago
30Monitor	CVE-2022-41716No exploit	Unsanitized NUL in environment variables on Windows in syscall and os/execgolang · go · CWE-158 Pre-auth	High7.5	—	0.9%	Nov 2, 2022
30Monitor	CVE-2026-84790No exploit	OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject fieldopenvpn · openvpn · CWE-158	High7.6	—	—	1 day ago
29Monitor	CVE-2025-1936No exploit	Adding %00 and a fake extension to a jar: URL changed the interpretation of the contentsmozilla · firefox · CWE-158 Pre-auth	High7.3	—	0.4%	Mar 4, 2025
27Monitor	CVE-2022-20812No exploit	Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilitiescisco · expressway · CWE-158	Medium6.5	—	1.9%	Jul 6, 2022
26Monitor	CVE-2020-7928No exploit	Improper neutralization of null byte leads to read overrunmongodb · mongodb · CWE-158	Medium6.5	—	1.4%	Nov 23, 2020
26Monitor	CVE-2026-23863No exploit	An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents wwhatsapp · whatsapp · CWE-158 Pre-auth	Medium6.5	—	0.5%	May 1, 2026
26Monitor	CVE-2020-5363No exploit	Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's managdell · latitude 5300 firmware · CWE-158 Local privilege escalation	Medium6.7	—	0.3%	Jun 10, 2020
23Monitor	CVE-2022-20813No exploit	Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilitiescisco · expressway · CWE-158 Pre-auth	Medium5.9	—	1.1%	Jul 6, 2022
22Monitor	CVE-2024-0408No exploit	Xorg-x11-server: selinux unlabeled glx pbufferx.org · x server · CWE-158 Denial of service	Medium5.5	—	0.3%	Jan 18, 2024
22Monitor	CVE-2026-41256No exploit	jq: Embedded NUL truncates top-level jq programs loaded with -fjqlang · jq · CWE-158	Medium5.5	—	0.2%	May 11, 2026
21Monitor	CVE-2026-105239No exploit	Apache log4net: NUL character truncates EventLogAppender recordsapache · log4net · CWE-158 Pre-auth	Medium5.3	—	0.8%	Oct 6, 2026
21Monitor	CVE-2026-105240No exploit	Apache log4net: NUL character truncates OutputDebugStringAppender recordsapache · log4net · CWE-158 Pre-auth	Medium5.3	—	0.8%	Oct 6, 2026
17Monitor	CVE-2026-47778No exploit	Envoy: Embedded NUL in TLS DNS SAN Truncation in the Default TLS Certificate Validator. (Auth Bypass)envoyproxy · envoy · CWE-158 Auth bypass	Medium4.4	—	0.2%	Jun 26, 2026

CVE-2025-47812
98Now
In Wing FTP Server before 7.4.4.
CriticalCVSS 10.0KEVWeaponizedEPSS 94%
- pre-auth RCE
wftpserver · wing ftp serverJul 10, 2025
CVE-2009-1537
80Now
Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows
HighCVSS 8.8KEVWeaponizedEPSS 51%
- pre-auth RCE
microsoft · directxMay 29, 2009
CVE-2020-14500
39Monitor
IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
secomea · gatemanager 8250 firmwareAug 25, 2020
CVE-2023-5719
39Monitor
Red Lion Crimson Improper Neutralization of Null Byte or NUL Character
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
redlion · crimsonNov 6, 2023
CVE-2025-14388
39Monitor
PhastPress <= 3.7 - Unauthenticated Arbitrary File Read via Null Byte Injection
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
kiboit · phastpressDec 23, 2025
CVE-2025-55113
38Monitor
BMC Control-M/Agent unescaped NULL byte in access control list checks
CriticalCVSS 9.5No exploitEPSS 0%
- Pre-auth
bmc · control-m\/agentSep 16, 2025
CVE-2025-66263
35Monitor
Unauthenticated Arbitrary File Read via Null Byte Injection
HighCVSS 8.9No exploitEPSS 0%
- Pre-auth
dbbroadcast · mozart next 3000 firmwareNov 25, 2025
CVE-2025-9648
34Monitor
Denial of Service in CivetWeb
HighCVSS 8.7No exploitEPSS 1%
- Pre-auth
civetweb · civetwebSep 29, 2025
CVE-2026-33191
34Monitor
free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error
HighCVSS 8.7No exploitEPSS 1%
- Pre-auth
free5gc · udmMar 20, 2026
CVE-2024-10921
32Monitor
Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server
HighCVSS 8.1No exploitEPSS 1%
mongodb · mongodbNov 14, 2024
CVE-2026-76354
32Monitor
Path Traversal through Search Head Clustering in Splunk Enterprise
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
splunk · splunkAug 19, 2026
CVE-2026-92705
31Monitor
Aegisub executes arbitrary code through automatically loaded Automation scripts
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
typesettingtools · aegisub5 days ago
CVE-2022-41716
30Monitor
Unsanitized NUL in environment variables on Windows in syscall and os/exec
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
golang · goNov 2, 2022
CVE-2026-84790
30Monitor
OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field
HighCVSS 7.6No exploit
openvpn · openvpn1 day ago
CVE-2025-1936
29Monitor
Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
mozilla · firefoxMar 4, 2025
CVE-2022-20812
27Monitor
Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
MediumCVSS 6.5No exploitEPSS 2%
cisco · expresswayJul 6, 2022
CVE-2020-7928
26Monitor
Improper neutralization of null byte leads to read overrun
MediumCVSS 6.5No exploitEPSS 1%
mongodb · mongodbNov 23, 2020
CVE-2026-23863
26Monitor
An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents w
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
whatsapp · whatsappMay 1, 2026
CVE-2020-5363
26Monitor
Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manag
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
dell · latitude 5300 firmwareJun 10, 2020
CVE-2022-20813
23Monitor
Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
MediumCVSS 5.9No exploitEPSS 1%
- Pre-auth
cisco · expresswayJul 6, 2022
CVE-2024-0408
22Monitor
Xorg-x11-server: selinux unlabeled glx pbuffer
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
x.org · x serverJan 18, 2024
CVE-2026-41256
22Monitor
jq: Embedded NUL truncates top-level jq programs loaded with -f
MediumCVSS 5.5No exploitEPSS 0%
jqlang · jqMay 11, 2026
CVE-2026-105239
21Monitor
Apache log4net: NUL character truncates EventLogAppender records
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
apache · log4netOct 6, 2026
CVE-2026-105240
21Monitor
Apache log4net: NUL character truncates OutputDebugStringAppender records
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
apache · log4netOct 6, 2026
CVE-2026-47778
17Monitor
Envoy: Embedded NUL in TLS DNS SAN Truncation in the Default TLS Certificate Validator. (Auth Bypass)
MediumCVSS 4.4No exploitEPSS 0%
- Auth bypass
envoyproxy · envoyJun 26, 2026

All vulnerability classes