Skip to content
OpenAdvisories

Weakness (CWE)

CWE-707: Improper Neutralization

Pillar Incomplete Mapping discouraged

The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being used when received from an upstream component, or before being sent to a downstream component.

Source: MITRE CWE-707

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.0
    CVE-2025-26633 Exploited · Ransomware Public exploit EPSS 30%

    Microsoft Management Console Security Feature Bypass Vulnerability

    Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Mar 11, 2025
  • High 8.1
    CVE-2024-10915 Public exploit EPSS 83%

    D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

    A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argu…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • High 8.1
    CVE-2024-10914 Public exploit EPSS 98%

    D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

    A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation …

    D-Link DNS-320 DNS-340L DNS-325 Network devices