CWE-146 · 10 kayıt

Improper Neutralization of Expression/Command Delimiters

Bu sınıftaki CVE’ler

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2024-20329İstismar yok	Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerabilitycisco · adaptive security appliance software · CWE-146 RCE Komut enjeksiyonu	Kritik9,9	—	%1,2	23 Eki 2024
37İzleyin	CVE-2023-20128İstismar yok	Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilitiescisco · rv320 firmware · CWE-146 RCE Komut enjeksiyonu	Yüksek7,2	—	%30,4	5 Nis 2023
37İzleyin	CVE-2023-20117İstismar yok	Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilitiescisco · rv320 firmware · CWE-146 RCE Komut enjeksiyonu	Yüksek7,2	—	%30,4	5 Nis 2023
35İzleyin	CVE-2025-53192İstismar yok	Apache Commons OGNL: Expression Injection leading to RCEapache · commons ognl · CWE-146 pre-auth RCE	Yüksek8,8	—	%0,6	18 Ağu 2025
35İzleyin	CVE-2026-22266İstismar yok	Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerabdell · powerprotect data manager · CWE-146	Yüksek8,8	—	%0,3	19 Şub 2026
31İzleyin	CVE-2023-20035İstismar yok	Cisco IOS XE SD-WAN Software Command Injection Vulnerabilitycisco · ios xe sd-wan · CWE-146 RCE Yerel yetki yükseltme Komut enjeksiyonu	Yüksek7,8	—	%0,2	23 Mar 2023
29İzleyin	CVE-2022-4055İstismar yok	When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to tfreedesktop · xdg-utils · CWE-146 Kimlik doğrulamasız	Yüksek7,4	—	%0,7	18 Kas 2022
28İzleyin	CVE-2024-20470İstismar yok	Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerabilitycisco · rv340 dual wan gigabit vpn router firmware · CWE-146 RCE	Yüksek7,2	—	%0,6	2 Eki 2024
26İzleyin	CVE-2026-20288İstismar yok	Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerabilitycisco · unified computing system · CWE-146 RCE	Orta6,5	—	%0,6	5 Ağu 2026
24İzleyin	CVE-2025-20237İstismar yok	A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software cisco · cisco adaptive security appliance (asa) software · CWE-146 RCE Yerel yetki yükseltme	Orta6,0	—	%0,2	14 Ağu 2025

CVE-2024-20329
39İzleyin
Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability
KritikCVSS 9,9İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
cisco · adaptive security appliance software23 Eki 2024
CVE-2023-20128
37İzleyin
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities
YüksekCVSS 7,2İstismar yokEPSS %30
- RCE
- Komut enjeksiyonu
cisco · rv320 firmware5 Nis 2023
CVE-2023-20117
37İzleyin
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities
YüksekCVSS 7,2İstismar yokEPSS %30
- RCE
- Komut enjeksiyonu
cisco · rv320 firmware5 Nis 2023
CVE-2025-53192
35İzleyin
Apache Commons OGNL: Expression Injection leading to RCE
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
apache · commons ognl18 Ağu 2025
CVE-2026-22266
35İzleyin
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerab
YüksekCVSS 8,8İstismar yokEPSS %0
dell · powerprotect data manager19 Şub 2026
CVE-2023-20035
31İzleyin
Cisco IOS XE SD-WAN Software Command Injection Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0
cisco · ios xe sd-wan23 Mar 2023
CVE-2022-4055
29İzleyin
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to t
YüksekCVSS 7,4İstismar yokEPSS %1
- Kimlik doğrulamasız
freedesktop · xdg-utils18 Kas 2022
CVE-2024-20470
28İzleyin
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
cisco · rv340 dual wan gigabit vpn router firmware2 Eki 2024
CVE-2026-20288
26İzleyin
Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %1
- RCE
cisco · unified computing system5 Ağu 2026
CVE-2025-20237
24İzleyin
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software
OrtaCVSS 6,0İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
cisco · cisco adaptive security appliance (asa) software14 Ağu 2025

Tüm zafiyet sınıfları