Advisories · Weakness
CWE-149.
Every Advisory and CVE whose sources give the weakness CWE-149, newest first.
- CVSS 5.0 Medium
Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
- aws-sdk-pandas
- SQL injection
- CWE-149
- CVSS 8.1 High
Remote code execution via malicious DHCP options
- FreeBSD
- CWE-149
- CVSS 9.3 CriticalCritical · CVSS 9+
Anviz AIM CrossChex Standard 4.3.6.0 CSV Injection via User Import
- Anviz Biometric Technology Co., Ltd. Anviz AIM CrossChex Standard
- CWE-149
- CVSS 8.3 High
F5OS-A/C CLI vulnerability
- F5OS - Appliance
- F5OS - Chassis
- CWE-149
- CWE-1286
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
- PostgreSQL
- CWE-149
- CVSS 3.5 Low
Jetty vulnerable to errant command quoting in CGI Servlet
- CWE-149
<12.0.0-beta2 · fixed in 12.0.0-beta2
GHSA-3gh6-v5v9-6v9j · CVE-2023-36479