CWE-706 · Input Validation and Logic
Use of Incorrectly-Resolved Name or Reference
147CVEs
SortMost likely exploited
147 CVEs with CWE-706 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-15505In CISA KEVExploitedMobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code ExecutionIvanti · MobileIron Multiple Products · CVSS 9.8 · 2020-07-07 | 9.8 | 100% | 2020-07-07 |
| CVE-2021-40539In CISA KEVExploitedZoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command ExecutionZoho · ManageEngine · CVSS 9.8 · 2021-09-07 | 9.8 | 99% | 2021-09-07 |
| CVE-2024-27292CheckDocassemble - Local File Inclusionjhpyle · docassemble · CVSS 7.5 · 2024-02-29 | 7.5 | 69% | 2024-02-29 |
| CVE-2021-40856CheckAuerswald COMfortel 1400/2600/3600 IP - Authentication BypassAuerswald · Comfortel 3600 Ip Firmware · 2021-12-13 | – | 50% | 2021-12-13 |
| CVE-2019-0220A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationM…Apache Software Foundation · Apache HTTP Server · 2019-06-11 | – | 18% | 2019-06-11 |
| CVE-2019-0571An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege V…Microsoft · Windows Server 2016 · 2019-01-08 | – | 16% | 2019-01-08 |
| CVE-2021-31933A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filter…Chamilo · Chamilo · CVSS 7.2 · 2021-04-30 | 7.2 | 14% | 2021-04-30 |
| CVE-2019-1351A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.Microsoft · Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) · 2020-01-24 | – | 8.7% | 2020-01-24 |
| CVE-2018-12020mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on…Gnupg · Gnupg · 2018-06-08 | – | 8.2% | 2018-06-08 |
| CVE-2020-26233Remote Code Execution in Git Credential Manager Coremicrosoft · Git-Credential-Manager-Core · CVSS 7.3 · 2020-12-08 | 7.3 | 6.0% | 2020-12-08 |
| CVE-2020-12278An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS Alternate Data Streams. This may allow r…Libgit2 · Libgit2 · 2020-04-27 | – | 5.2% | 2020-04-27 |
| CVE-2020-12279An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names. This may allow remote c…Libgit2 · Libgit2 · 2020-04-27 | – | 5.1% | 2020-04-27 |
| CVE-2019-9901Envoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative path, e.g., something/../admin, to bypass access control, e.g., a block on /admin.…Envoyproxy · Envoy · CVSS 6.5 · 2019-04-25 | 6.5 | 5.0% | 2019-04-25 |
| CVE-2019-7731MyWebSQL 3.7 has a remote code execution (RCE) vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename…Mywebsql · Mywebsql · 2019-02-11 | – | 4.2% | 2019-02-11 |
| CVE-2022-27778A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.Haxx · https://github.com/curl/curl · 2022-06-01 | – | 3.8% | 2022-06-01 |
| CVE-2019-9616An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA…Ofcms Project · Ofcms · 2019-03-06 | – | 2.7% | 2019-03-06 |
| CVE-2019-8908An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" sc…Wtcms Project · Wtcms · 2019-02-18 | – | 2.3% | 2019-02-18 |
| CVE-2021-27306An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT.Konghq · Kong Gateway · 2021-03-18 | – | 1.8% | 2021-03-18 |
| CVE-2018-6112Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restrictions via a crafted…Google · Chrome · 2019-01-09 | – | 1.6% | 2019-01-09 |
| CVE-2020-13311A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was vulnerable to a parser attack that prohibits anyone from accessing the Wiki functiona…GitLab · GitLab · CVSS 4.3 · 2020-09-14 | 4.3 | 1.5% | 2020-09-14 |
| CVE-2026-92262MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.MariaDB · server · CVSS 9.9 · 2026-10-16 | 9.9 | 1.5% | 2026-10-16 |
| CVE-2019-17575A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This can be exploited by an authenticated user with admin privileges to rename a media…Wbce · Wbce Cms · 2019-10-14 | – | 1.4% | 2019-10-14 |
| CVE-2020-10574An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON…Meetecho · Janus · 2020-03-14 | – | 1.4% | 2020-03-14 |
| CVE-2019-0816A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Featu…Microsoft · Ubuntu Server · 2019-04-09 | – | 1.4% | 2019-04-09 |
| CVE-2021-31920Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could…Istio · Istio · 2021-05-27 | – | 1.3% | 2021-05-27 |
| CVE-2021-37144CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink() function is called and user input might affect portions of or the whole affected param…Cszcms · Csz Cms · 2021-07-29 | – | 1.3% | 2021-07-29 |
| CVE-2020-35566Local file inclusion vulnerability in products of MB connect line and HelmholzHelmholz · Myrex24 · CVSS 5.3 · 2021-02-16 | 5.3 | 1.3% | 2021-02-16 |
| CVE-2020-35894An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur.Obstack Project · Obstack · 2020-12-31 | – | 1.2% | 2020-12-31 |
| CVE-2022-31089Invalid file request can crashe parse-serverparse-community · parse-server · CVSS 7.5 · 2022-06-27 | 7.5 | 1.2% | 2022-06-27 |
| CVE-2026-118207Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft · Microsoft Exchange Server Subscription Edition RTM · CVSS 8.8 · 2026-11-10 | 8.8 | 1.1% | 2026-11-10 |
| CVE-2021-37315Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via impro…Asus · Rt-Ac68u Firmware · CVSS 9.1 · 2023-02-03 | 9.1 | 1.1% | 2023-02-03 |
| CVE-2019-12837The Java API in accesuniversitat.gencat.cat 1.7.5 allows remote attackers to get personal information of all registered students via several API endpoints.Gencat · Portal D'acces A La Universitat · 2019-12-31 | – | 1.1% | 2019-12-31 |
| CVE-2020-35623An issue was discovered in the CasAuth extension for MediaWiki through 1.35.1. Due to improper username validation, it allowed user impersonation with trivial manipulations of cer…Mediawiki · Mediawiki · 2020-12-21 | – | 1.1% | 2020-12-21 |
| CVE-2021-37214Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-3Larvata Digital Technology Co. Ltd. · FLYGO · CVSS 8.8 · 2021-08-09 | 8.8 | 1.1% | 2021-08-09 |
| CVE-2022-29445WordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerabilityWow-Company · Popup Box (WordPress plugin) · CVSS 6.8 · 2022-05-18 | 6.8 | 1.1% | 2022-05-18 |
| CVE-2022-29448WordPress Herd Effects plugin <= 5.2 - Local File Inclusion (LFI) vulnerabilityWow-Company · Herd Effects (WordPress plugin) · CVSS 6.8 · 2022-05-20 | 6.8 | 1.0% | 2022-05-20 |
| CVE-2021-32054Firely/Incendi Spark before 1.5.5-r4 lacks Content-Disposition headers in certain situations, which may cause crafted files to be delivered to clients such that they are rendered…Fire.ly · Spark · 2021-05-14 | – | 1.0% | 2021-05-14 |
| CVE-2026-65816Azure Arc Elevation of Privilege VulnerabilityMicrosoft · Azure Web Apps · CVSS 10 · 2026-08-20 | 10.0 | 1.0% | 2026-08-20 |
| CVE-2020-4719The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition. This could enable an…IBM · Cloud APM · CVSS 4.9 · 2021-03-02 | 4.9 | 0.9% | 2021-03-02 |
| CVE-2026-81383Visual Studio Code Information Disclosure VulnerabilityMicrosoft · Visual Studio Code · CVSS 7.4 · 2026-09-08 | 7.4 | 0.9% | 2026-09-08 |
| CVE-2023-31814D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php.Dlink · Dir-300 Firmware · CVSS 9.8 · 2023-05-23 | 9.8 | 0.9% | 2023-05-23 |
| CVE-2024-35198TorchServe bypass allowed_urls configurationpytorch · serve · CVSS 9.8 · 2024-07-18 | 9.8 | 0.8% | 2024-07-18 |
| CVE-2023-28643Potential share collision for recipients when caching is enabled in nextcloud servernextcloud · security-advisories · CVSS 5.5 · 2023-03-30 | 5.5 | 0.8% | 2023-03-30 |
| CVE-2026-13097Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastoreRed Hat · Red Hat Enterprise Linux 10 · CVSS 8.7 · 2026-08-20 | 8.7 | 0.8% | 2026-08-20 |
| CVE-2026-40912Traefik: StripPrefixRegex auth bypass via Path/RawPath desynctraefik · traefik · CVSS 8.6 · 2026-04-30 | 8.6 | 0.8% | 2026-04-30 |
| CVE-2021-37213Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-2Larvata Digital Technology Co. Ltd. · FLYGO · CVSS 4.3 · 2021-08-09 | 4.3 | 0.8% | 2021-08-09 |
| CVE-2022-30258An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be resolvable for a lon…Technitium · Dns Server · CVSS 9.8 · 2022-11-21 | 9.8 | 0.7% | 2022-11-21 |
| CVE-2022-30257An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a lon…Technitium · Dns Server · CVSS 9.8 · 2022-11-21 | 9.8 | 0.7% | 2022-11-21 |
| CVE-2024-57785Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amc_uploads.php.No vendor recorded · CVSS 4.9 · 2025-01-16 | 4.9 | 0.7% | 2025-01-16 |
| CVE-2022-30621Cellinx NVT – IP PTZ Camera local file inclusionCellinx · Cellinx NVT - IP PTZ Camera · CVSS 7.6 · 2022-07-18 | 7.6 | 0.7% | 2022-07-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.