CWE-74

High likelihood

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Parent: CWE-707 - Improper Neutralization

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

4,984 vulnerabilities with CWE-74
CVE-2026-10220 HIGH
NousResearch hermes-agent skills_tool.py skill_view injection
CVSS 7.3
CVE-2026-10210 MEDIUM
AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection
CVSS 6.3
CVE-2026-10209 MEDIUM
code-projects Online Hospital Management System Appointment appointmentdetail.php sql injection
CVSS 6.3
CVE-2026-10208 HIGH
code-projects Online Hospital Management System login_1.php login_user sql injection
CVSS 7.3
CVE-2026-10204 MEDIUM
OFCMS JSON Query SysUserController.java query sql injection
CVSS 6.3
CVE-2026-10203 MEDIUM
OFCMS JSON Query SystemParamController.java query sql injection
CVSS 6.3
CVE-2026-10202 MEDIUM
OFCMS JSON Query SystemDictController.java query sql injection
CVSS 6.3
CVE-2026-10193 MEDIUM
OFCMS ComnController ComnController.java query sql injection
CVSS 6.3
CVE-2026-10186 HIGH
code-projects Online Hospital Management System patient.php sql injection
CVSS 7.3
CVE-2026-10185 HIGH
SourceCodester Hospitals Patient Records Management System Users.php save sql injection
CVSS 7.3
CVE-2026-10184 HIGH
SourceCodester Hospitals Patient Records Management System Users.php delete sql injection
CVSS 7.3
CVE-2026-10182 MEDIUM
TRENDnet TEW-432BRP formWlanSetup command injection
CVSS 6.3
CVE-2026-10180 MEDIUM
TRENDnet TEW-432BRP formSysCmd command injection
CVSS 6.3
CVE-2026-10178 HIGH
code-projects Online Music Site AdminEditAlbum.php sql injection
CVSS 7.3
CVE-2026-10176 MEDIUM
Aider-AI Aider Code Generation Workflow sql injection
CVSS 6.3
CVE-2026-10175 MEDIUM
Aider-AI Aider Architect Mode auth.py editor_coder.run code injection
CVSS 6.3
CVE-2026-10171 MEDIUM
code-projects Online Music Site AdminUpdateAlbum.php sql injection
CVSS 4.7
CVE-2026-10170 MEDIUM
code-projects Visitor Management System phone_0.php sql injection
CVSS 6.3
CVE-2026-10166 MEDIUM
Edimax BR-6478AC POST Request formWlbasic command injection
CVSS 6.3
CVE-2026-10155 MEDIUM
Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection
CVSS 4.7
CVE-2026-10127 MEDIUM
Edimax BR-6478AC POST Request formStaDrvSetup command injection
CVSS 6.3
CVE-2026-10111 HIGH
sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection
CVSS 7.3
CVE-2026-10110 HIGH
code-projects Student Details Management System index.php sql injection
CVSS 7.3
CVE-2026-10061 MEDIUM
TRENDnet TEW-432BRP formWPS command injection
CVSS 6.3
CVE-2026-10060 MEDIUM
TRENDnet TEW-432BRP formSetRoute command injection
CVSS 6.3
Details
Vulnerabilities 4,984
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits