Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-147

7 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 7 in the listAtom feed of new CVEsWhat CWE-147 is, at MITRE (opens in a new tab)
Published CVEs
7
Last 12 months
2
Critical
1
Known exploited
0

Critical 1High 0Medium 4Low 2Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20241
  3. 20253
  4. 20262

Newest CVEs

  • CVE-2026-113602

    json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character

    json-smart · json-smart

    Medium6.9
  • CVE-2026-82989

    CVE-2026-82989

    Viewsonic · vCast

    Critical9.8
  • CVE-2025-7962

    In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

    Eclipse Foundation · Jakarta Mail

    Medium6.0
  • CVE-2024-50349

    Git does not sanitize URLs when asking for credentials interactively

    git · git

    Low2.1
  • CVE-2024-52006

    Newline confusion in credential helpers can lead to credential exfiltration in git

    git · git

    Low2.1
  • CVE-2024-52505

    matrix-appservice-irc allows IRC Command injection in provisioning API

    matrix-org · matrix-appservice-irc

    Medium5.4
  • CVE-2023-4393

    HTML and SMTP Injection in LiquidFiles

    LiquidFiles Pty Ltd · LiquidFiles

    Medium5.4

Vendors it comes up for most

  1. git2
  2. Eclipse Foundation1
  3. LiquidFiles Pty Ltd1
  4. Viewsonic1
  5. json-smart1
  6. matrix-org1