Advisories · Weakness
CWE-146.
Every Advisory and CVE whose sources give the weakness CWE-146, newest first.
- CVSS 6.5 Medium
Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability
- Cisco Enterprise NFV Infrastructure Software
- Cisco Unified Computing System (Standalone)
- CWE-146
- CVSS 4.7 Medium
Dell PowerProtect Data Manager: Dell PowerProtect Data Manager, version(s) prior to 19.22…
- Dell PowerProtect Data Manager
- CWE-146
- CVSS 8.8 High
Apache Commons OGNL: Expression Injection leading to RCE
- Apache Software Foundation Apache Commons OGNL
- CWE-146
- CVSS 6.0 Medium
A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arb…
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- CWE-146
- CVSS 9.9 CriticalCritical · CVSS 9+
Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-146
- CVSS 6.5 Medium
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerability
- Cisco Small Business RV Series Router Firmware
- CWE-146
- CVSS 7.2 HighCritical · CVSS 7+ and EPSS
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities
- Cisco Small Business RV Series Router Firmware
- CWE-146
- CVSS 7.2 HighCritical · CVSS 7+ and EPSS
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities
- Cisco Small Business RV Series Router Firmware
- CWE-146
- CVSS 7.8 High
Cisco IOS XE SD-WAN Software Command Injection Vulnerability
- Cisco IOS XE Software
- CWE-146
- CVSS 7.4 High
When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368.
- xdg-utils
- CWE-146