CWE-235 · 4 kayıt

Improper Handling of Extra Parameters

Bu sınıftaki CVE’ler

4 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2017-20160İstismar yok	flitto express-param fetchParams.js parameter pollutionflitto · express-param · CWE-235 Kimlik doğrulamasız	Kritik9,8	—	%0,9	31 Ara 2022
36İzleyin	CVE-2026-27851İstismar yok	When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enablidovecot · dovecot · CWE-235 Kimlik doğrulamasız	Kritik9,1	—	%0,6	12 May 2026
28İzleyin	CVE-2024-47651İstismar yok	Parameter Pollution Vulnerabilityshilpi · client dashboard · CWE-235	Yüksek7,1	—	%0,4	4 Eki 2024
26İzleyin	CVE-2026-20083İstismar yok	A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with cisco · cisco ios xe software · CWE-235 Yerel yetki yükseltme Hizmet dışı bırakma	Orta6,5	—	%0,1	25 Mar 2026

CVE-2017-20160
39İzleyin
flitto express-param fetchParams.js parameter pollution
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
flitto · express-param31 Ara 2022
CVE-2026-27851
36İzleyin
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabli
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
dovecot · dovecot12 May 2026
CVE-2024-47651
28İzleyin
Parameter Pollution Vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0
shilpi · client dashboard4 Eki 2024
CVE-2026-20083
26İzleyin
A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with
OrtaCVSS 6,5İstismar yokEPSS %0
- Yerel yetki yükseltme
- Hizmet dışı bırakma
cisco · cisco ios xe software25 Mar 2026