CWE-140: CWE-140
Yearly Trend
Top Affected Vendors
All CWE-140 CVEs (7)
This vulnerability allows authenticated users to inject arbitrary Livestatus commands through the RestAPI autocomplete endpoint in Checkmk. Attackers ...
Jul 4, 2025This vulnerability allows authorized users of Checkmk's RestAPI to execute arbitrary livestatus commands due to improper input sanitization. Attackers...
May 17, 2023This vulnerability in Asterisk PBX allows authenticated attackers to spoof user identities when sending SIP MESSAGE requests, enabling them to send sp...
May 22, 2025This vulnerability allows authorized users of Checkmk to execute arbitrary livestatus commands by exploiting improper neutralization of command delimi...
Nov 22, 2023CVE-2024-38866 is an input validation vulnerability in Nagvis that allows livestatus injection attacks. Attackers can inject malicious commands into N...
May 27, 2025CVE-2024-42482 is a command injection vulnerability in the fish-shop/syntax-check GitHub Action that allows attackers to execute arbitrary commands on...
Aug 12, 2024This vulnerability in Cesanta Mongoose Web Server v7.14 allows attackers to trigger an infinite loop by sending input with unexpected characters. This...
Nov 18, 2024About CWE-140 (CWE-140)
Our database tracks 7 CVEs classified as CWE-140, with 0 rated critical and 5 rated high severity. The average CVSS score for CWE-140 vulnerabilities is 7.0.
External reference: View CWE-140 on MITRE CWE →
Monitor CWE-140 Vulnerabilities
Get alerted when new CWE-140 CVEs affect your infrastructure.
Start Monitoring Free