CWE-284 (2634) CWE-79 (1821) CWE-416 (1289) CWE-862 (1175) CWE-89 (1097) CWE-22 (1023) CWE-125 (880) CWE-200 (847) CWE-306 (838) CWE-122 (830) CWE-20 (795) CWE-78 (710) CWE-918 (689) CWE-787 (681) CWE-94 (641) CWE-863 (617) CWE-74 (600) CWE-639 (542) CWE-400 (530) CWE-269 (501) CWE-119 (494) CWE-502 (470) CWE-770 (440) CWE-287 (431) CWE-121 (406) CWE-77 (373) CWE-190 (367) CWE-362 (323) CWE-352 (276) CWE-285 (243)

CWE-99

8 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-114716 high 8.5 0.0039 2026-10-22 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner
CVE-2026-62910 high 7.2 0.0100 2026-08-11 Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows
CVE-2026-114726 medium 5.8 0.0033 2026-10-22 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner
CVE-2026-33603 medium 5.3 0.0021 2026-05-12 Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS ch
CVE-2026-114725 medium 5.0 0.0029 2026-10-22 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner
CVE-2026-114717 medium 4.0 0.0030 2026-10-22 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulner
CVE-2026-15186 low 2.1 0.0041 2026-07-09 A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of t
CVE-2026-13493 low 1.3 0.0037 2026-06-28 A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown proce