CWE-115

34 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 8High 10Medium 14Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-101170
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.
Huawei · HarmonyOS
Medium4.0
CVE-2026-116241
pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier
pgadmin.org · pgAdmin 4
Critical9.4
CVE-2026-73798
HPE NonStop DNS 9.2.3 Non Secure Version
Hewlett Packard Enterprise · HPE NonStop DNS 9.2.3 Non Secure Version
High8.2
CVE-2026-63650
OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup…
OpenVPN · OpenVPN
Low2.0
CVE-2026-17566
pgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incomplete defense, sibling gap to CVE-2025-13780)
pgadmin.org · pgAdmin 4
Critical9.4
CVE-2026-17351
pgAdmin 4: AI Assistant read-only transaction bypass via sqlparse/PostgreSQL lexer disagreement (incomplete fix for CVE-2026-12045)
pgadmin.org · pgAdmin 4
Critical9.4
CVE-2026-42004
EDNS options smuggling
PowerDNS · DNSdist
Low3.7
CVE-2026-12491
Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations
vllm-project · vLLM
Medium4.8
CVE-2025-68113
ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay
altcha-org · altcha-lib
Medium6.5
CVE-2025-55303
Unauthorized third-party images in Astro’s _image endpoint
withastro · astro
Medium6.9