CWE-141 · Injection and Smuggling
Improper Neutralization of Parameter/Argument Delimiters
11CVEs
SortMost likely exploited
11 CVEs with CWE-141 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-7868Helpu remote code execution vulnerabilityHelpU · helpu.ocx · CVSS 9.6 · 2021-06-29 | 9.6 | 2.7% | 2021-06-29 |
| CVE-2022-29873A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an un…Siemens · SICAM T · CVSS 9.8 · 2022-05-10 | 9.8 | 2.0% | 2022-05-10 |
| CVE-2022-29872A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated atta…Siemens · SICAM T · CVSS 8.8 · 2022-05-10 | 8.8 | 1.5% | 2022-05-10 |
| CVE-2022-41665A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-0A…Siemens · SICAM P850 · CVSS 9.8 · 2022-10-11 | 9.8 | 1.4% | 2022-10-11 |
| CVE-2023-28815Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain p…Hikvision · iSecure Center · CVSS 9.8 · 2025-10-17 | 9.8 | 1.4% | 2025-10-17 |
| CVE-2024-0840Grandstream UCM Series IP PBX HTTP Parameter InjectionGrandstream · UCM Series · CVSS 8.8 · 2024-04-29 | 8.8 | 0.9% | 2024-04-29 |
| CVE-2026-20200Cisco Integrated Management Controller Argument Injection and Remote Code Execution VulnerabilityCisco · Cisco Unified Computing System (Standalone) · CVSS 8.8 · 2026-08-05 | 8.8 | 0.7% | 2026-08-05 |
| CVE-2026-66323Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 5.4 · 2026-08-28 | 5.4 | 0.4% | 2026-08-28 |
| CVE-2025-31329Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformSAP_SE · SAP NetWeaver Application Server ABAP and ABAP Platform · CVSS 6.2 · 2025-05-13 | 6.2 | 0.4% | 2025-05-13 |
| CVE-2025-20338A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underl…Cisco · Cisco IOS XE Software · CVSS 6 · 2025-09-24 | 6.0 | 0.3% | 2025-09-24 |
| CVE-2026-56813Cookie attribute injection in Plug.Conn.Cookies.encode/2elixir-plug · plug · CVSS 2.1 · 2026-07-10 | 2.1 | 0.2% | 2026-07-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.