CWE-472 · Input Validation and Logic
External Control of Assumed-Immutable Web Parameter
167CVEs
1exploited
0with a public check
3likely (EPSS 10%+)
SortMost likely exploited
167 CVEs with CWE-472 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-35939In CISA KEVExploitedCraft CMS stores user-provided content in session filesCraft · CMS · CVSS 5.3 · 2025-05-07 | 5.3 | 1.4% | 2025-05-07 |
| CVE-2024-25153Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114Fortra · FileCatalyst · CVSS 9.8 · 2024-03-13 | 9.8 | 42% | 2024-03-13 |
| CVE-2025-6191Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium sec…Google · Chrome · CVSS 8.8 · 2025-06-18 | 8.8 | 12% | 2025-06-18 |
| CVE-2025-7656Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi…Google · Chrome · CVSS 8.8 · 2025-07-15 | 8.8 | 11% | 2025-07-15 |
| CVE-2026-8510Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory…Google · Chrome · CVSS 7.5 · 2026-05-14 | 7.5 | 10.0% | 2026-05-14 |
| CVE-2017-5261In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerabi…Cambium Networks · cnPilot · 2017-12-20 | – | 8.9% | 2017-12-20 |
| CVE-2025-10891Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi…Google · Chrome · CVSS 8.8 · 2025-09-24 | 8.8 | 8.7% | 2025-09-24 |
| CVE-2017-5260In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console…Cambium Networks · cnPilot · 2017-12-20 | – | 8.1% | 2017-12-20 |
| CVE-2021-1293Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 9.8 · 2021-02-04 | 9.8 | 5.7% | 2021-02-04 |
| CVE-2021-1294Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 9.8 · 2021-02-04 | 9.8 | 4.7% | 2021-02-04 |
| CVE-2021-1295Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 9.8 · 2021-02-04 | 9.8 | 4.4% | 2021-02-04 |
| CVE-2021-1291Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 9.8 · 2021-02-04 | 9.8 | 4.4% | 2021-02-04 |
| CVE-2021-1290Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 9.8 · 2021-02-04 | 9.8 | 4.4% | 2021-02-04 |
| CVE-2021-1289Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 9.8 · 2021-02-04 | 9.8 | 4.4% | 2021-02-04 |
| CVE-2021-1292Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 9.8 · 2021-02-04 | 9.8 | 4.4% | 2021-02-04 |
| CVE-2019-13927A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 (All f…Siemens AG · Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D w… · 2019-12-12 | – | 1.7% | 2019-12-12 |
| CVE-2020-1765Spoofing of From field in several screensOTRS AG · ((OTRS)) Community Edition · CVSS 3.5 · 2020-01-10 | 3.5 | 1.5% | 2020-01-10 |
| CVE-2022-30597A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field.Moodle · moodle · 2022-05-18 | – | 1.3% | 2022-05-18 |
| CVE-2024-22049httparty Multipart/Form-Data Request Tampering VulnerabilityJohn Nunemaker · httparty · CVSS 5.3 · 2024-01-04 | 5.3 | 1.3% | 2024-01-04 |
| CVE-2026-3538Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium s…Google · Chrome · CVSS 8.8 · 2026-03-04 | 8.8 | 0.8% | 2026-03-04 |
| CVE-2021-27769HCL Sametime is vulnerable to an information disclosureHCL Software · Sametime · CVSS 5.3 · 2022-05-12 | 5.3 | 0.8% | 2022-05-12 |
| CVE-2021-27770HCL Sametime is vulnerable to arbitrary HTTP requestsHCL Software · Sametime · CVSS 6.8 · 2022-05-12 | 6.8 | 0.7% | 2022-05-12 |
| CVE-2024-7025Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sev…Google · Chrome · CVSS 8.8 · 2024-11-27 | 8.8 | 0.7% | 2024-11-27 |
| CVE-2026-3536Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium…Google · Chrome · CVSS 8.8 · 2026-03-04 | 8.8 | 0.7% | 2026-03-04 |
| CVE-2024-3649Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price Manipulationsmub · WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surve… · CVSS 5.3 · 2024-05-02 | 5.3 | 0.7% | 2024-05-02 |
| CVE-2026-2649Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi…Google · Chrome · CVSS 8.8 · 2026-02-18 | 8.8 | 0.6% | 2026-02-18 |
| CVE-2026-65052Ninja Forms Calculation and Payment Total Tampering via Fail-Open get_calc_value in ListSelect and ListRadio FieldsSaturday Drive · Ninja Forms · CVSS 7.5 · 2026-07-21 | 7.5 | 0.6% | 2026-07-21 |
| CVE-2025-0436Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sever…Google · Chrome · CVSS 8.8 · 2025-01-15 | 8.8 | 0.6% | 2025-01-15 |
| CVE-2026-67363Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2balbooa.com · Balbooa Forms extension for Joomla · CVSS 7.7 · 2026-08-19 | 7.7 | 0.6% | 2026-08-19 |
| CVE-2023-28512IBM Watson CP4D Data Stores improper input validationIBM · Watson CP4D Data Stores · CVSS 5.9 · 2024-03-03 | 5.9 | 0.5% | 2024-03-03 |
| CVE-2025-3530WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulationmra13 · Simple Shopping Cart · CVSS 7.5 · 2025-04-23 | 7.5 | 0.5% | 2025-04-23 |
| CVE-2025-47817In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.BlueWave · Checkmate · CVSS 8.8 · 2025-05-10 | 8.8 | 0.5% | 2025-05-10 |
| CVE-2025-43930Hashview 0.8.1 allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTTP header.No vendor recorded · CVSS 9.8 · 2025-07-07 | 9.8 | 0.5% | 2025-07-07 |
| CVE-2025-47245In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.BlueWave · Checkmate · CVSS 8.1 · 2025-05-03 | 8.1 | 0.5% | 2025-05-03 |
| CVE-2025-29788Sylius PayPal Plugin Payment Amount Manipulation VulnerabilitySylius · PayPalPlugin · CVSS 6.5 · 2025-03-17 | 6.5 | 0.5% | 2025-03-17 |
| CVE-2024-9123Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security sev…Google · Chrome · CVSS 8.8 · 2024-09-24 | 8.8 | 0.5% | 2024-09-24 |
| CVE-2026-2519Online Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips'ladela · Online Scheduling and Appointment Booking System – Bookly · CVSS 5.3 · 2026-04-09 | 5.3 | 0.5% | 2026-04-09 |
| CVE-2024-50703TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id.TeamPass · TeamPass · CVSS 5.4 · 2024-12-30 | 5.4 | 0.5% | 2024-12-30 |
| CVE-2026-107363In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to the project authenticated by the Keystone token. An authen…OpenStack · Zaqar · CVSS 6.1 · 2026-10-07 | 6.1 | 0.5% | 2026-10-07 |
| CVE-2026-77470Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST requestLycheeOrg · Lychee · CVSS 8.3 · 2026-10-15 | 8.3 | 0.5% | 2026-10-15 |
| CVE-2025-66385UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g., obtain a higher role such as admin) via the user-edi…cerebrate-project · Cerebrate · CVSS 9.4 · 2025-11-28 | 9.4 | 0.5% | 2025-11-28 |
| CVE-2026-5274Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity:…Google · Chrome · CVSS 8.8 · 2026-04-01 | 8.8 | 0.4% | 2026-04-01 |
| CVE-2026-82189Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com · J2Store extension for Joomla · CVSS 8.7 · 2026-09-15 | 8.7 | 0.4% | 2026-09-15 |
| CVE-2026-77999Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com · J2Store extension for Joomla · CVSS 8.7 · 2026-09-03 | 8.7 | 0.4% | 2026-09-03 |
| CVE-2025-43933fblog through 983bede allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTTP header.No vendor recorded · CVSS 9.8 · 2025-07-07 | 9.8 | 0.4% | 2025-07-07 |
| CVE-2025-22384An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business logic exists in the Commerce B2B application, which allows s…Optimizely · Configured Commerce · CVSS 7.5 · 2025-01-04 | 7.5 | 0.4% | 2025-01-04 |
| CVE-2024-6010Cost Calculator Builder PRO <= 3.2.1 - Unauthenticated Price ManipulationStylemixThemes · Cost Calculator Builder PRO · CVSS 5.3 · 2024-09-07 | 5.3 | 0.4% | 2024-09-07 |
| CVE-2026-7571Keycloak: keycloak: access token disclosure and implicit flow bypass via forged client dataRed Hat · Red Hat build of Keycloak 26.4 · CVSS 7.1 · 2026-05-19 | 7.1 | 0.4% | 2026-05-19 |
| CVE-2026-14430Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sev…Google · Chrome · CVSS 8.8 · 2026-07-01 | 8.8 | 0.4% | 2026-07-01 |
| CVE-2025-3743Upsell Funnel Builder for WooCommerce <= 3.0.0 - Unauthenticated Order Manipulationwpswings · Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bump… · CVSS 5.3 · 2025-04-25 | 5.3 | 0.4% | 2025-04-25 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.