CWE-147
CVEs classified under CWE-147, newest first.
3 CVEsRSS
CVE-2026-113602Medium· 5.3PoCnet.minidev/json-smart: json-smart: Input validation bypass via substitute character in strict mode (CVE-2026-113602)
A flaw was found in json-smart. A remote attacker can exploit this input validation bypass vulnerability by submitting crafted JSON data containing a literal substitute (0x1A) character followed by malformed content. This causes strict-mod…
▾ TwilightRed Hat · OpenShift Developer Tools and ServicesEPSS 0.45%via CSAF
CVE-2026-82989Critical· 9.8There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpo…
There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpo…
▾ MidnightViewsonic · vCastEPSS 0.67%via NVD
CVE-2025-7962High· 7.5In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.
In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.
▾ Twilighteclipse · jakarta_mailEPSS 0.89%via NVD