Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-146

10 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
10
Last 12 months
2
Critical
1
Known exploited
0

Critical 1High 5Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20221
  2. 20233
  3. 20242
  4. 20252
  5. 20262

Newest CVEs

  • CVE-2026-20288

    Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability

    Cisco · Cisco Enterprise NFV Infrastructure Software

    Medium6.5
  • CVE-2026-22266

    Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of Source of a Communication Channel vulnerability in the REST…

    Dell · PowerProtect Data Manager

    Medium4.7
  • CVE-2025-53192

    Apache Commons OGNL: Expression Injection leading to RCE

    Apache Software Foundation · Apache Commons OGNL

    High8.8
  • CVE-2025-20237

    A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an…

    Cisco · Cisco Adaptive Security Appliance (ASA) Software

    Medium6.0
  • CVE-2024-20329

    Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability

    Cisco · Cisco Adaptive Security Appliance (ASA) Software

    Critical9.9
  • CVE-2024-20470

    Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerability

    Cisco · Cisco Small Business RV Series Router Firmware

    Medium6.5
  • CVE-2023-20128

    Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities

    Cisco · Cisco Small Business RV Series Router Firmware

    High7.2
  • CVE-2023-20117

    Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities

    Cisco · Cisco Small Business RV Series Router Firmware

    High7.2
  • CVE-2023-20035

    Cisco IOS XE SD-WAN Software Command Injection Vulnerability

    Cisco · Cisco IOS XE Software

    High7.8
  • CVE-2022-4055

    When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that…

    xdg-utils

    High7.4

Vendors it comes up for most

  1. Cisco7
  2. Apache Software Foundation1
  3. Dell1