Skip to content
BackEsc
Sign in

CWE-141 · weakness in Injection and Smuggling

Improper Neutralization of Parameter/Argument Delimiters

11 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

  1. Helpu remote code execution vulnerabilityCVE-2020-7868HelpU · CVSS 9.6 · 2.7% likely
  2. A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an un…CVE-2022-29873Siemens · CVSS 9.8 · 2.0% likely

    Siemens

  3. A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated atta…CVE-2022-29872Siemens · CVSS 8.8 · 1.5% likely

    Siemens

  4. A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-0A…CVE-2022-41665Siemens · CVSS 9.8 · 1.4% likely

    Siemens

  5. Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain p…CVE-2023-28815Hikvision · CVSS 9.8 · 1.4% likely

    Hikvision

  6. Grandstream UCM Series IP PBX HTTP Parameter InjectionCVE-2024-0840Grandstream · CVSS 8.8 · 0.9% likely

    Grandstream

  7. Cisco Integrated Management Controller Argument Injection and Remote Code Execution VulnerabilityCVE-2026-20200Cisco · CVSS 8.8 · 0.7% likelycovered by CyberSIXT

    Cisco

  8. Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2026-66323Microsoft · CVSS 5.4 · 0.4% likely

    Microsoft

  9. Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformCVE-2025-31329SAP_SE · CVSS 6.2 · 0.4% likely

    SAP

  10. A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underl…CVE-2025-20338Cisco · CVSS 6 · 0.3% likely

    Cisco

  11. Cookie attribute injection in Plug.Conn.Cookies.encode/2CVE-2026-56813elixir-plug · CVSS 2.1 · 0.2% likely

    Elixir-Plug

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in