Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-149

6 published CVEs are weaknesses of this kind, as the records or NVD name it.

All 6 in the listAtom feed of new CVEsWhat CWE-149 is, at MITRE (opens in a new tab)
Published CVEs
6
Last 12 months
3
Critical
1
Known exploited
0

Critical 1High 3Medium 1Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20253
  3. 20262

Newest CVEs

  • CVE-2026-119301

    Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    AWS · aws-sdk-pandas

    Medium5.0
  • CVE-2026-42511

    Remote code execution via malicious DHCP options

    FreeBSD · FreeBSD

    High8.1
  • CVE-2018-25135

    Anviz AIM CrossChex Standard 4.3.6.0 CSV Injection via User Import

    Anviz Biometric Technology Co., Ltd. · Anviz AIM CrossChex Standard

    Critical9.3
  • CVE-2025-43878

    F5OS-A/C CLI vulnerability

    F5 · F5OS - Appliance

    High8.3
  • CVE-2025-1094

    PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

    PostgreSQL

    High8.1
  • CVE-2023-36479

    Jetty vulnerable to errant command quoting in CGI Servlet

    eclipse · jetty.project

    Low3.5

Vendors it comes up for most

  1. AWS1
  2. Anviz Biometric Technology Co., Ltd.1
  3. F51
  4. FreeBSD1
  5. eclipse1