Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-792

5 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
5
Last 12 months
1
Critical
0
Known exploited
0

Critical 0High 2Medium 2Low 0Not scored 1

CVEs per yearBy the year they were published

  1. 20233
  2. 20252

Newest CVEs

  • CVE-2025-12758

    Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength()…

    validator

    High8.7
  • CVE-2025-47779

    Using malformed From header can forge identity with ";" or NULL in name portion

    asterisk · asterisk

    High7.7
  • CVE-2023-25608

    An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1,…

    Fortinet · FortiAP-W2

    Medium5.2
  • CVE-2022-22297

    An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through…

    Fortinet · FortiRecorder

    Medium5.2
  • CVE-2023-20057

    A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote…

    Cisco · Cisco Email Security Appliance (ESA)

    None0.0

Vendors it comes up for most

  1. Fortinet2
  2. Cisco1
  3. asterisk1