CWE-150: CWE-150
Yearly Trend
Top Affected Vendors
All CWE-150 CVEs (14)
This vulnerability allows administrative users within a Gardener project to escalate privileges and gain control over seed clusters managing their sho...
May 19, 2025This vulnerability in Inspektor Gadget allows malicious containers to inject ANSI escape sequences into terminal output, potentially enabling terminal...
Feb 12, 2026CVE-2025-25286 is a critical remote code execution vulnerability in Crayfish's Homarus microservice that provides FFmpeg functionality. Attackers can ...
Feb 13, 2025CVE-2023-3265 is an authentication bypass vulnerability in CyberPower PowerPanel Enterprise that allows unauthenticated attackers to log in as adminis...
Aug 14, 2023Apache Tomcat fails to escape ANSI escape sequences in log messages, allowing attackers to inject malicious sequences when Tomcat runs in a console su...
Oct 27, 2025CVE-2025-0975 is an improper input validation vulnerability in IBM MQ console that allows authenticated users to execute arbitrary code by exploiting ...
Feb 28, 2025A vulnerability in Jinja templating engine allows attackers who control both template content and filename to execute arbitrary Python code, bypassing...
Dec 23, 2024CVE-2025-15311 is an unauthorized code execution vulnerability in Tanium Appliance that allows attackers to execute arbitrary code without proper auth...
Feb 5, 2026This vulnerability in WinRAR allows attackers to inject ANSI escape sequences into archive comments, which can spoof the screen output displayed to us...
May 21, 2024This vulnerability in Copilot allows attackers to exploit improper input sanitization to extract sensitive information over network connections. It af...
Jan 22, 2026This vulnerability allows attackers to manipulate CGI program behavior by injecting malicious environment variables through Apache configuration. It a...
Dec 5, 2025This vulnerability allows attackers to inject malicious code into MongoDB Shell (mongosh) through clipboard manipulation. An attacker controlling the ...
Feb 27, 2025This vulnerability allows attackers to inject ASCII control characters and ANSI escape sequences into badkeys tool output, creating misleading results...
Jan 6, 2026Soft Serve Git server versions before 0.10.0 fail to sanitize ANSI escape sequences in user-controlled input fields like names and git messages. This ...
Nov 8, 2025About CWE-150 (CWE-150)
Our database tracks 14 CVEs classified as CWE-150, with 5 rated critical and 5 rated high severity. The average CVSS score for CWE-150 vulnerabilities is 8.0.
External reference: View CWE-150 on MITRE CWE →
Monitor CWE-150 Vulnerabilities
Get alerted when new CWE-150 CVEs affect your infrastructure.
Start Monitoring Free