Skip to content
CVE Tracker

CWE-86

11 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
11
Last 12 months
3
Critical
1
Known exploited
0

Critical 1High 2Medium 6Low 2Not scored 0

CVEs per yearBy the year they were published

  1. 20232
  2. 20242
  3. 20241
  4. 20262
  5. 20264

Newest CVEs

  • CVE-2026-71478

    league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes

    thephpleague · commonmark

    Medium6.1
  • CVE-2026-28417

    Vim has OS Command Injection in netrw

    vim · vim

    Medium4.4
  • CVE-2025-66606

    A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper…

    Yokogawa Electric Corporation · FAST/TOOLS

    Low2.1
  • CVE-2025-20168

    Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability

    Cisco · Cisco Common Services Platform Collector Software

    Medium5.4
  • CVE-2025-20167

    Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability

    Cisco · Cisco Common Services Platform Collector Software

    Medium5.4
  • CVE-2025-20166

    Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability

    Cisco · Cisco Common Services Platform Collector Software

    Medium5.4
  • CVE-2024-10941

    A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126.

    Mozilla · Firefox

    Medium4.3
  • CVE-2021-33158

    Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to…

    Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware

    High7.2
  • CVE-2024-21864

    Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially…

    Intel(R) Arc(TM) & Iris(R) Xe Graphics software

    High7.8
  • CVE-2023-22840

    Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of…

    Intel(R) oneVPL GPU software

    Low3.3

Vendors it comes up for most

  1. Cisco3
  2. Mozilla1
  3. Yokogawa Electric Corporation1
  4. thephpleague1
  5. vim1
  6. xwiki1