CWE-284 (2632) CWE-79 (1807) CWE-416 (1283) CWE-862 (1172) CWE-89 (1092) CWE-22 (1018) CWE-125 (869) CWE-200 (844) CWE-306 (834) CWE-122 (828) CWE-20 (791) CWE-78 (703) CWE-918 (686) CWE-787 (681) CWE-94 (637) CWE-863 (613) CWE-74 (600) CWE-639 (535) CWE-400 (516) CWE-269 (501) CWE-119 (494) CWE-502 (467) CWE-770 (435) CWE-287 (427) CWE-121 (404) CWE-77 (372) CWE-190 (365) CWE-362 (321) CWE-352 (274) CWE-285 (242)

CWE-77

372 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-19047 low 1.9 0.0108 2026-08-06 A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function execu
CVE-2026-19279 low 1.9 0.0108 2026-08-08 A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0. The impacted element is the functio
CVE-2026-19281 low 1.9 0.0078 2026-08-08 A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0. This affects t
CVE-2026-19282 low 1.9 0.0106 2026-08-08 A weakness has been identified in andreahaku llm_memory_mcp up to f11dc8bcff3ff8cf943a2945f99ff3b0bd
CVE-2026-19284 low 1.9 0.0078 2026-08-08 A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the
CVE-2026-19329 low 1.9 0.0078 2026-08-09 A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. Th
CVE-2026-19332 low 1.9 0.0078 2026-08-09 A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerability
CVE-2026-19333 low 1.9 0.0108 2026-08-09 A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03
CVE-2026-19334 low 1.9 0.0108 2026-08-09 A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This a
CVE-2026-16133 low 1.3 0.0123 2026-07-18 A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the functio
CVE-2026-16488 low 1.3 0.0149 2026-07-22 A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the fu
CVE-2016-3081 — — 0.9653 — Apache Struts contains a command injection vulnerability that could allow remote attackers to execut KEV
CVE-2018-19949 — — 0.3016 — A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to ru KEV
CVE-2024-21887 — — 1.0000 — Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain KEV
CVE-2024-55956 — — 0.9397 — Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestrict KEV
CVE-2025-10035 — — 0.9982 — Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor wit KEV
CVE-2026-7246 — — 0.0090 2026-04-30 This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability
CVE-2026-8037 — — 0.9984 — Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attac KEV
CVE-2005-2773 — — 0.7459 — HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the KEV
CVE-2007-3010 — — 0.9738 — masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows KEV
CVE-2010-4345 — — 0.1797 — Exim allows local users to gain privileges by leveraging the ability of the exim user account to spe KEV
CVE-2012-1823 — — 1.0000 — sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, KEV