CWE-707 · 206 records

Improper Neutralization

CVEs in this class

206 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
81Now	CVE-2024-43572Weaponized	Microsoft Management Console Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-707 RCE	High7.8	KEV	66.7%	Oct 8, 2024
67This week	CVE-2025-26633Weaponized	Microsoft Management Console Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1507 · CWE-707	High7.0	KEV	30.4%	Mar 11, 2025
52Plan	CVE-2022-4257No exploit	C-DATA Web Management System GET Parameter jumpto.php argument injectioncdatatec · c-data web management system · CWE-707 Pre-auth	Critical9.8	—	43.9%	Dec 1, 2022
44Plan	CVE-2022-3801No exploit	IBAX go-ibax rowsInfo sql injectionibax · go-ibax · CWE-707 SQL injection	High8.8	—	30.1%	Nov 1, 2022
40Plan	CVE-2022-4375Proof of concept	Mingsoft MCMS list sql injectionmingsoft · mcms · CWE-707 Pre-auth SQL injection	Critical9.8	—	3.2%	Dec 9, 2022
39Monitor	CVE-2022-4011No exploit	Simple History Plugin Header neutralization for logssimple history project · simple history · CWE-707 Pre-auth	Critical9.8	—	1.0%	Nov 16, 2022
39Monitor	CVE-2022-3827No exploit	centreon Contact Groups Form formContactGroup.php sql injectioncentreon · centreon · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.8%	Nov 2, 2022
39Monitor	CVE-2022-4566No exploit	y_project RuoYi GenController sql injectionruoyi · ruoyi · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.8%	Dec 16, 2022
39Monitor	CVE-2022-3947No exploit	eolinker goku_lite list sql injectioneolink · goku lite · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.8%	Nov 11, 2022
39Monitor	CVE-2022-4399No exploit	TicklishHoneyBee nodau db.c sql injectionnodau project · nodau · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.8%	Dec 10, 2022
39Monitor	CVE-2022-3948No exploit	eolinker goku_lite getList sql injectioneolink · goku lite · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.8%	Nov 11, 2022
39Monitor	CVE-2022-3789No exploit	Tim Campus Confession Wall share.php sql injectiontim campus confession wall project · tim campus confession wall · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Nov 1, 2022
39Monitor	CVE-2022-3332No exploit	SourceCodester Food Ordering Management System POST Parameter router.php sql injectionfood ordering management system project · food ordering management system · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Sep 28, 2022
39Monitor	CVE-2022-3583No exploit	SourceCodester Canteen Management System login.php sql injectioncanteen management system project · canteen management system · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Oct 18, 2022
39Monitor	CVE-2022-3579No exploit	SourceCodester Cashier Queuing System Login Page login.php sql injectionoretnom23 · cashier queuing system · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Oct 18, 2022
39Monitor	CVE-2022-3955No exploit	tholum crm42 Login class.user.php sql injectioncrm42 project · crm42 · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Nov 11, 2022
39Monitor	CVE-2022-4222No exploit	SourceCodester Canteen Management System POST Request ajax_invoice.php query sql injectioncanteen management system project · canteen management system · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Nov 30, 2022
39Monitor	CVE-2022-3956No exploit	tsruban HHIMS Patient Portrait sql injectionhhims project · hhims · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Nov 11, 2022
39Monitor	CVE-2022-3878No exploit	Maxon ERP browse_data sql injectionmaxonerp · maxon · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Nov 7, 2022
39Monitor	CVE-2022-4277No exploit	Shaoxing Background Management System Bd sql injectionxsjczx · background management system · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Dec 3, 2022
39Monitor	CVE-2021-4262No exploit	laravel-jqgrid EloquentRepositoryAbstract.php getRows sql injectionlaravel jqgrid project · laravel jqgrid · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Dec 19, 2022
39Monitor	CVE-2022-3414No exploit	SourceCodester Web-Based Student Clearance System POST Parameter login.php sql injectionweb-based student clearance system project · web-based student clearance system · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Oct 7, 2022
39Monitor	CVE-2022-4274No exploit	House Rental System view-property.php sql injectionhouse rental system project · house rental system · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Dec 3, 2022
39Monitor	CVE-2022-4275No exploit	House Rental System POST Request search-property.php sql injectionhouse rental system project · house rental system · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Dec 3, 2022
39Monitor	CVE-2022-3504No exploit	SourceCodester Sanitization Management System sql injectionsanitization management system project · sanitization management system · CWE-707 Pre-auth SQL injection	Critical9.8	—	0.7%	Oct 14, 2022

CVE-2024-43572
81Now
Microsoft Management Console Remote Code Execution Vulnerability
HighCVSS 7.8KEVWeaponizedEPSS 67%
- RCE
microsoft · windows 10 1507Oct 8, 2024
CVE-2025-26633
67This week
Microsoft Management Console Security Feature Bypass Vulnerability
HighCVSS 7.0KEVWeaponizedEPSS 30%
microsoft · windows 10 1507Mar 11, 2025
CVE-2022-4257
52Plan
C-DATA Web Management System GET Parameter jumpto.php argument injection
CriticalCVSS 9.8No exploitEPSS 44%
- Pre-auth
cdatatec · c-data web management systemDec 1, 2022
CVE-2022-3801
44Plan
IBAX go-ibax rowsInfo sql injection
HighCVSS 8.8No exploitEPSS 30%
- SQL injection
ibax · go-ibaxNov 1, 2022
CVE-2022-4375
40Plan
Mingsoft MCMS list sql injection
CriticalCVSS 9.8Proof of conceptEPSS 3%
- Pre-auth
- SQL injection
mingsoft · mcmsDec 9, 2022
CVE-2022-4011
39Monitor
Simple History Plugin Header neutralization for logs
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
simple history project · simple historyNov 16, 2022
CVE-2022-3827
39Monitor
centreon Contact Groups Form formContactGroup.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
centreon · centreonNov 2, 2022
CVE-2022-4566
39Monitor
y_project RuoYi GenController sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
ruoyi · ruoyiDec 16, 2022
CVE-2022-3947
39Monitor
eolinker goku_lite list sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
eolink · goku liteNov 11, 2022
CVE-2022-4399
39Monitor
TicklishHoneyBee nodau db.c sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
nodau project · nodauDec 10, 2022
CVE-2022-3948
39Monitor
eolinker goku_lite getList sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
eolink · goku liteNov 11, 2022
CVE-2022-3789
39Monitor
Tim Campus Confession Wall share.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
tim campus confession wall project · tim campus confession wallNov 1, 2022
CVE-2022-3332
39Monitor
SourceCodester Food Ordering Management System POST Parameter router.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
food ordering management system project · food ordering management systemSep 28, 2022
CVE-2022-3583
39Monitor
SourceCodester Canteen Management System login.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
canteen management system project · canteen management systemOct 18, 2022
CVE-2022-3579
39Monitor
SourceCodester Cashier Queuing System Login Page login.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
oretnom23 · cashier queuing systemOct 18, 2022
CVE-2022-3955
39Monitor
tholum crm42 Login class.user.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
crm42 project · crm42Nov 11, 2022
CVE-2022-4222
39Monitor
SourceCodester Canteen Management System POST Request ajax_invoice.php query sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
canteen management system project · canteen management systemNov 30, 2022
CVE-2022-3956
39Monitor
tsruban HHIMS Patient Portrait sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
hhims project · hhimsNov 11, 2022
CVE-2022-3878
39Monitor
Maxon ERP browse_data sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
maxonerp · maxonNov 7, 2022
CVE-2022-4277
39Monitor
Shaoxing Background Management System Bd sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
xsjczx · background management systemDec 3, 2022
CVE-2021-4262
39Monitor
laravel-jqgrid EloquentRepositoryAbstract.php getRows sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
laravel jqgrid project · laravel jqgridDec 19, 2022
CVE-2022-3414
39Monitor
SourceCodester Web-Based Student Clearance System POST Parameter login.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
web-based student clearance system project · web-based student clearance systemOct 7, 2022
CVE-2022-4274
39Monitor
House Rental System view-property.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
house rental system project · house rental systemDec 3, 2022
CVE-2022-4275
39Monitor
House Rental System POST Request search-property.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
house rental system project · house rental systemDec 3, 2022
CVE-2022-3504
39Monitor
SourceCodester Sanitization Management System sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
sanitization management system project · sanitization management systemOct 14, 2022

All vulnerability classes