CWE-115: Misinterpretation of Input
The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.
A kind of CWE-436 Interpretation Conflict.
From the CWE List. © The MITRE Corporation.
Newest
- jelmer dulwich Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretation 8.6 High
- huawei harmonyos DoS vulnerability in the file parsing module. Impact: Successful exploitation of this... 4.0 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier 9.4 Critical
- hewlett packard enterprise hpe nonstop dns 9.2.3 non secure version HPE NonStop DNS 9.2.3 Non Secure Version 8.2 High
- openvpn OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be... 2.0 Low
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incomplete defense, sibling gap to CVE-2025-13780) 9.4 Critical
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: AI Assistant read-only transaction bypass via sqlparse/PostgreSQL lexer disagreement (incomplete fix for CVE-2026-12045) 9.4 Critical
- powerdns dnsdist EDNS options smuggling 3.7 Low
- vllm-project vllm, red hat ai inference server, enterprise linux ai (rhel ai) 3 +1 more +3 more Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations 4.8 Medium
- altcha-org altcha-lib ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay 6.5 Medium
- astro Unauthorized third-party images in Astro’s _image endpoint 6.9 Medium
- finos gitproxy, git-proxy +1 more GitProxy is vulnerable to a packfile parsing exploit 7.0 High
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 more Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability 6.3 Medium
- wolfbox level 2 ev charger, level 2 ev charger firmware +1 more WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of Input Remote Code Execution Vulnerability 8.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 more Libsoup: denial of service on libsoup through http/2 server 7.5 High
- binary-husky binary-husky/gpt academic, gpt academic +1 more Regular Expression Denial of Service (ReDoS) in binary-husky/gpt_academic 6.5 Medium
- danny-avila danny-avila/librechat, librechat +1 more Unhandled Exception Leading to Server Crash in danny-avila/librechat 7.5 High
- mudler localai, mudler/localai +1 more Cross-Site Scripting (XSS) in mudler/localai 5.4 Medium
- go standard library net/http, golang.org/x/net golang.org/x/net/http/httpproxy, golang.org/x/net/proxy +2 more HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 4.4 Medium
- apache kvrocks Apache Kvrocks: Cross-Protocol Scripting Vulnerability 6.5 Medium
- bosch ams, bis +1 more A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF... 4.6 Medium
- opentext asset management x (amx), service management automation x (smax), opentext™ hybrid cloud management x (hcmx) +2 more A potential Misinterpretation of Input vulnerability has been identified in SMAX, AMX, and HCMX products. 6.5 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 more Misinterpretation of Input in thorsten/phpmyfaq 8.3 High
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability 7.4 High
- ionicabizau ionicabizau/parse-url, parse-url project parse-url +1 more Misinterpretation of Input in ionicabizau/parse-url 9.4 Critical
- medialize medialize/uri.js, uri.js project uri.js +1 more URL Confusion When Scheme Not Supplied in medialize/uri.js 6.5 Medium
- lfs-book make-ca /etc/pki/tls and /etc/ssl/certs include distrusted certificates in make-ca 6.5 Medium
- cisco nx-os software, nx-os +1 more Cisco NX-OS Software VXLAN OAM (NGOAM) Denial of Service Vulnerability 8.6 High
- ruby-lang rexml, ruby, fedoraproject fedora +2 more REXML round-trip instability 7.5 High
- xmldom, debian linux +1 more Misinterpretation of malicious XML input 4.3 Medium
- juniper junos, juniper networks junos os +1 more NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded. 7.5 High
- saml project saml, fedoraproject fedora, grafana +3 more +5 more XML Processing error in github.com/crewjam/saml 9.8 Critical
- ecies go, netapp trident +1 more Authentication Bypass in github.com/russellhaering/gosaml2 9.8 Critical
- ecies go, netapp trident +1 more The encoding/xml package in Go (all versions) does not correctly preserve the semantics of... 9.8 Critical
- ecies go, netapp trident +1 more The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the... 9.8 Critical
- node.js Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in... 4.3 Medium
- node.js, suse enterprise storage, linux enterprise server +1 more +3 more Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can... 7.5 High
- node.js The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header,... 5.3 Medium