Skip to content
Noroxi

CWE-829 · 253 records

Inclusion of Functionality from Untrusted Control Sphere

CVEs in this class

253 records

  • CVE-2026-0770
    88Now

    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

    CriticalCVSS 9.8KEVWeaponizedEPSS 62%

    langflow · langflowJan 23, 2026

  • CVE-2025-32463
    78This week

    Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the -

    HighCVSS 7.8KEVWeaponizedEPSS 55%

    sudo project · sudoJun 30, 2025

  • CVE-2020-16152
    60This week

    The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers

    CriticalCVSS 9.8WeaponizedEPSS 35%

    extremenetworks · aerohive netconfigNov 14, 2021

  • CVE-2024-38476
    51Plan

    Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect

    CriticalCVSS 9.8Proof of conceptEPSS 41%

    apache · http serverJul 1, 2024

  • CVE-2010-2076
    42Plan

    Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, A

    CriticalCVSS 9.8No exploitEPSS 9%

    apache · cxfAug 19, 2010

  • CVE-2004-0285
    41Plan

    PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote a

    CriticalCVSS 9.8Proof of conceptEPSS 7%

    allmyguests project · allmyguestsNov 23, 2004

  • CVE-2004-0030
    41Plan

    PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 al

    CriticalCVSS 9.8Proof of conceptEPSS 7%

    phpgedview · phpgedviewJan 20, 2004

  • CVE-2020-3794
    41Plan

    ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability.

    CriticalCVSS 9.8No exploitEPSS 7%

    adobe · coldfusionMar 25, 2020

  • CVE-2023-6971
    41Plan

    The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP heade

    CriticalCVSS 9.8No exploitEPSS 6%

    backupbliss · backup migrationDec 22, 2023

  • CVE-2022-1161
    41Plan

    ICSA-22-090-05 Rockwell Automation Logix Controllers

    CriticalCVSS 9.8No exploitEPSS 5%

    rockwellautomation · compactlogix 1768-l43 firmwareApr 11, 2022

  • CVE-2020-4561
    41Plan

    IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions.

    CriticalCVSS 10.0No exploitEPSS 2%

    ibm · cognos analyticsJun 1, 2021

  • CVE-2019-13589
    40Plan

    The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party.

    CriticalCVSS 9.8No exploitEPSS 4%

    anjlab · paranoid2Jul 14, 2019

  • CVE-2022-29845
    40Plan

    In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction t

    MediumCVSS 6.5WeaponizedEPSS 4%

    progress · whatsup goldMay 11, 2022

  • CVE-2017-5397
    40Plan

    The cache directory on the local file system is set to be world writable.

    CriticalCVSS 9.8No exploitEPSS 3%

    mozilla · firefoxJun 11, 2018

  • CVE-2012-4919
    40Plan

    Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability

    CriticalCVSS 9.8No exploitEPSS 2%

    gallery project · galleryJan 22, 2020

  • CVE-2020-8128
    40Plan

    An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbit

    CriticalCVSS 9.8No exploitEPSS 2%

    jsreport · jsreportFeb 14, 2020

  • CVE-2017-1376
    40Plan

    A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges.

    CriticalCVSS 9.8No exploitEPSS 2%

    ibm · operations analytics predictive insightsAug 28, 2017

  • CVE-2021-32802
    40Plan

    Preview generation used third-party library not suited for user-generated content in Nextcloud server

    CriticalCVSS 9.8No exploitEPSS 2%

    nextcloud · nextcloud serverSep 7, 2021

  • CVE-2020-25414
    40Plan

    A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attackers to execute arbitr

    CriticalCVSS 9.8No exploitEPSS 2%

    monstra · monstraJun 17, 2021

  • CVE-2023-49134
    40Plan

    A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point

    CriticalCVSS 9.8No exploitEPSS 1%

    tp-link · eap225 firmwareApr 9, 2024

  • CVE-2023-49133
    40Plan

    A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point

    CriticalCVSS 9.8No exploitEPSS 1%

    tp-link · eap225 firmwareApr 9, 2024

  • CVE-2025-70974
    40Plan

    Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java

    CriticalCVSS 10.0No exploitEPSS 0%

    alibaba · fastjsonJan 9, 2026

  • CVE-2024-38537
    39Monitor

    Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    ethyca · fidesJul 2, 2024

  • CVE-2023-26053
    39Monitor

    Gradle usage of long IDs for PGP keys opens potential for collision attacks

    CriticalCVSS 9.8No exploitEPSS 0%

    gradle · gradleMar 2, 2023

  • CVE-2022-24119
    39Monitor

    Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell

    CriticalCVSS 9.8No exploitEPSS 0%

    ge · inet 900 firmwareDec 26, 2022

All vulnerability classes