CWE-473
5 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 5
- Last 12 months
- 2
- Critical
- 2
- Known exploited
- 2
Critical 2High 2Medium 1Low 0Not scored 0
CVEs per yearBy the year they were published
- 20232
- 20241
- 20262
Known exploitedNewest addition to KEV first
- CVE-2023-36845
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
Juniper Networks · Junos OS
ExploitedCritical9.8 - CVE-2023-36844
Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
Juniper Networks · Junos OS
ExploitedMedium5.3
Newest CVEs
- CVE-2026-40285
WeGIA has SQL Injection via Session Variable Override in DespachoControle.php
LabRedesCefetRJ · WeGIA
High8.8 - CVE-2026-28411
WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
LabRedesCefetRJ · WeGIA
Critical9.8 - CVE-2024-27489
An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.
Product not named
High7.5 - CVE-2023-36845
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
Juniper Networks · Junos OS
ExploitedCritical9.8 - CVE-2023-36844
Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
Juniper Networks · Junos OS
ExploitedMedium5.3