CWE-829 · Supply Chain and Malicious Code
Inclusion of Functionality from Untrusted Control Sphere
314CVEs
3exploited
5with a public check
3likely (EPSS 10%+)
SortMost likely exploited
314 CVEs with CWE-829 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-0770In CISA KEVExploitedLangflow < 1.3.0 - Remote Code Execution via validate_code() exec()Langflow · Langflow · CVSS 9.8 · 2026-01-23 | 9.8 | 63% | 2026-01-23 |
| CVE-2025-32463In CISA KEVExploitedSudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.Sudo project · Sudo · CVSS 9.3 · 2025-06-30 | 9.3 | 56% | 2025-06-30 |
| CVE-2026-111357In CISA KEVExploitedIvanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the…Ivanti · Connect Secure · CVSS 7 · 2026-10-15 | 7.0 | 0.5% | 2026-10-15 |
| CVE-2022-25486CheckCuppa CMS v1.0 - Local File InclusionCuppacms · Cuppacms · 2022-03-15 | – | 10% | 2022-03-15 |
| CVE-2021-41569CheckSAS/Internet 9.4 1520 - Local File InclusionSas · Sas/intrnet · 2021-11-19 | – | 8.0% | 2021-11-19 |
| CVE-2022-25485CheckCuppa CMS v1.0 - Local File InclusionCuppacms · Cuppacms · 2022-03-15 | – | 8.0% | 2022-03-15 |
| CVE-2022-34121CheckCuppaCMS v1.0 - Local File InclusionCuppacms · Cuppacms · 2022-07-27 | – | 3.9% | 2022-07-27 |
| CVE-2022-37191CheckCuppa CMS v1.0 - Authenticated Local File InclusionCuppacms · Cuppacms · 2022-09-13 | – | 3.3% | 2022-09-13 |
| CVE-2024-38476Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirectApache Software Foundation · Apache HTTP Server · CVSS 9.8 · 2024-07-01 | 9.8 | 42% | 2024-07-01 |
| CVE-2020-16152The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user v…Extremenetworks · Aerohive Netconfig · 2021-11-14 | – | 36% | 2021-11-14 |
| CVE-2024-29073An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by defaul…Ankitects · Anki · CVSS 5.3 · 2024-07-22 | 5.3 | 12% | 2024-07-22 |
| CVE-2010-2076Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other…Apache · Cxf · 2010-08-19 | – | 9.8% | 2010-08-19 |
| CVE-2018-8351An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka "Microsoft Browser Information Disclosure Vulnerabili…Microsoft · Internet Explorer 11 · 2018-08-15 | – | 8.4% | 2018-08-15 |
| CVE-2004-0285PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code…Allmyguests Project · Allmyguests · 2004-03-18 | – | 7.8% | 2004-03-18 |
| CVE-2004-0030PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitr…Phpgedview · Phpgedview · 2004-01-08 | – | 7.3% | 2004-01-08 |
| CVE-2020-3794ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in th…Adobe · ColdFusion · 2020-03-25 | – | 7.1% | 2020-03-25 |
| CVE-2022-1161ICSA-22-090-05 Rockwell Automation Logix ControllersRockwell Automation · 1768 CompactLogix controllers · CVSS 10 · 2022-04-11 | 10.0 | 5.2% | 2022-04-11 |
| CVE-2021-30121(Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6Kaseya · Vsa · CVSS 6.5 · 2021-07-09 | 6.5 | 5.0% | 2021-07-09 |
| CVE-2019-13589The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.…Anjlab · Paranoid2 · 2019-07-14 | – | 4.3% | 2019-07-14 |
| CVE-2022-29845In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read the conten…Progress · Whatsup Gold · 2022-05-11 | – | 4.2% | 2022-05-11 |
| CVE-2017-6381A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection agai…Drupal · Drupal Core · 2017-03-16 | – | 3.9% | 2017-03-16 |
| CVE-2017-5397The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed…Mozilla · Firefox · 2018-06-11 | – | 3.6% | 2018-06-11 |
| CVE-2018-11040Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON w…Pivotal · Spring Framework · 2018-06-25 | – | 3.2% | 2018-06-25 |
| CVE-2020-4561IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who can access a valid CA endpoint…IBM · Cognos Analytics · CVSS 10 · 2021-05-31 | 10.0 | 2.9% | 2021-05-31 |
| CVE-2012-4919Gallery Plugin1.4 for WordPress has a Remote File Include VulnerabilityGallery Plugin authors · Gallery · 2020-01-22 | – | 2.9% | 2020-01-22 |
| CVE-2020-13977Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via c…Nagios · Nagios · 2020-06-09 | – | 2.7% | 2020-06-09 |
| CVE-2020-8128An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.Jsreport · jsreport · 2020-02-14 | – | 2.7% | 2020-02-14 |
| CVE-2017-1376A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873.IBM · Operations Analytics Predictive Insights · 2017-08-28 | – | 2.6% | 2017-08-28 |
| CVE-2021-32802Preview generation used third-party library not suited for user-generated content in Nextcloud servernextcloud · security-advisories · CVSS 9.3 · 2021-09-07 | 9.3 | 2.6% | 2021-09-07 |
| CVE-2021-26272It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (…Ckeditor · Ckeditor · 2021-01-26 | – | 2.4% | 2021-01-26 |
| CVE-2021-3603Inclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailerPHPMailer · PHPMailer · CVSS 8.1 · 2021-06-17 | 8.1 | 2.3% | 2021-06-17 |
| CVE-2013-3321NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror…Netapp · Oncommand System Manager · 2020-01-29 | – | 2.2% | 2020-01-29 |
| CVE-2022-24329In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.Jetbrains · Kotlin · 2022-02-25 | – | 2.2% | 2022-02-25 |
| CVE-2020-25414A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attackers to execute arbitrary PHP code.Monstra · Monstra · 2021-06-17 | – | 2.0% | 2021-06-17 |
| CVE-2018-15486An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface…Kone · Group Controller Firmware · 2018-09-07 | – | 2.0% | 2018-09-07 |
| CVE-2019-9829Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/default_pc/html/art Edit action. This occurs because template rendering uses an…Maccms · Maccms · 2019-03-15 | – | 2.0% | 2019-03-15 |
| CVE-2021-26271It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advance…Ckeditor · Ckeditor · 2021-01-26 | – | 2.0% | 2021-01-26 |
| CVE-2013-4582The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Ent…GitLab · GitLab · 2020-01-28 | – | 1.9% | 2020-01-28 |
| CVE-2019-8154A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to modify product catalo…Adobe Systems Incorporated · Magento 2 · 2019-11-05 | – | 1.9% | 2019-11-05 |
| CVE-2022-30243Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be stored on the controller and then run withou…Honeywell · Alterton Visual Logic Firmware · 2022-07-15 | – | 1.9% | 2022-07-15 |
| CVE-2018-18387playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse.Playsms Project · Playsms · 2018-10-29 | – | 1.8% | 2018-10-29 |
| CVE-2023-49134A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and…Tp-Link · AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) · CVSS 8.1 · 2024-04-09 | 8.1 | 1.7% | 2024-04-09 |
| CVE-2023-49133A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926 and…Tp-Link · AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) · CVSS 8.1 · 2024-04-09 | 8.1 | 1.7% | 2024-04-09 |
| CVE-2019-11742A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a <canvas> element due to an error in how same-origi…Mozilla · Firefox · 2019-09-27 | – | 1.7% | 2019-09-27 |
| CVE-2020-10865An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to make arbitrary change…Avast · Antivirus · 2020-04-01 | – | 1.7% | 2020-04-01 |
| CVE-2025-27607Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependencynhairs · python-json-logger · CVSS 8.8 · 2025-03-07 | 8.8 | 1.6% | 2025-03-07 |
| CVE-2022-24232A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.Hospital's Patient Records Management System Project · Hospital's Patient Records Management System · 2022-02-24 | – | 1.5% | 2022-02-24 |
| CVE-2022-30244Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and t…Honeywell · Alerton Ascent Control Module Firmware · 2022-07-15 | – | 1.5% | 2022-07-15 |
| CVE-2024-38537Inclusion of Untrusted polyfill.io Code Vulnerability in fides.jsethyca · fides · CVSS 0 · 2024-07-02 | 0.0 | 1.4% | 2024-07-02 |
| CVE-2021-29777IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being dropped while being accessed in ano…IBM · DB2 for Linux, UNIX and Windows · CVSS 5.3 · 2021-06-24 | 5.3 | 1.4% | 2021-06-24 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.