CWE-116 · Improper Encoding or Escaping of Output (page 4)
Page 4 of 6 — CVEs classified under CWE-116, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-38177 | High | 7.8 | 2024-08-13 | Windows App Installer Spoofing Vulnerability |
CVE-2024-6329 | Medium | 5.7 | 2024-08-08 | An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 p… |
CVE-2023-26289 | Medium | 5.4 | 2024-07-30 | IBM Aspera Orchestrator 4.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker… |
CVE-2024-39682 | Medium | 6.4 | 2024-07-18 | Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.7.15.4 due to insu… |
CVE-2024-39736 | Medium | 6.5 | 2024-07-15 | IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers… |
CVE-2024-39929 | Medium | 5.4 | 2024-07-04 | Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename extension-blocking protection mechani… |
CVE-2024-38475 | Critical | 9.1 | 2024-07-01 | Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted t… |
CVE-2024-38474 | Critical | 9.8 | 2024-07-01 | Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configur… |
CVE-2024-38473 | High | 8.1 | 2024-07-01 | Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially… |
CVE-2024-27629 | High | 7.8 | 2024-06-28 | An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name is not properly escaped and injected in… |
CVE-2024-35225 | Critical | 9.6 | 2024-06-11 | Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them. Versions of… |
CVE-2024-5585 | High | 7.7 | 2024-06-09 | In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spa… |
CVE-2024-4177 | High | 8.1 | 2024-06-06 | A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This… |
CVE-2024-34715 | Low | 2.3 | 2024-05-29 | Fides is an open-source privacy engineering platform. The Fides webserver requires a connection to a hosted PostgreSQL database for persistent storage of appli… |
CVE-2024-4420 | High | 7.5 | 2024-05-21 | There exists a Denial of service vulnerability in Tink-cc in versions prior to 2.1.3. * An adversary can crash binaries using the crypto::tink::JsonKeysetRe… |
CVE-2024-34355 | Low | 3.5 | 2024-05-14 | TYPO3 is an enterprise content management system. Starting in version 13.0.0 and prior to version 13.1.1, the history backend module is vulnerable to HTML inje… |
CVE-2024-29894 | Medium | 5.4 | 2024-05-14 | Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 contain a residual cross-site scripting vulnerabilit… |
CVE-2024-34510 | High | 7.5 | 2024-05-05 | Gradio before 4.20 allows credential leakage on Windows. |
CVE-2023-28952 | Medium | 5.3 | 2024-05-03 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to injection attacks in application logging by not sanitizing user provided data. IBM X-Force I… |
CVE-2024-1874 | Critical | 9.4 | 2024-04-29 | In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, i… |
CVE-2024-31866 | Critical | 9.8 | 2024-04-09 | Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers can execute shell scripts or malicious code by overriding configuratio… |
CVE-2024-22356 | Medium | 4.9 | 2024-03-26 | IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 through 10.1.0.2store potentially sensit… |
CVE-2024-28245 | Medium | 6.3 | 2024-03-25 | KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input usin… |
CVE-2024-29156 | Medium | 6.5 | 2024-03-18 | In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied… |
CVE-2024-27938 | Medium | 5.3 | 2024-03-11 | Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed… |
CVE-2022-22399 | Medium | 5.4 | 2024-03-05 | IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an atta… |
CVE-2024-21499 | Medium | 4.3 | 2024-02-17 | All versions of the package github.com/greenpau/caddy-security are vulnerable to HTTP Header Injection via the X-Forwarded-Proto header due to redirecting to t… |
CVE-2024-0690 | Medium | 5.0 | 2024-02-06 | An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still i… |
CVE-2024-1064 | High | 7.5 | 2024-02-03 | A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Servi… |
CVE-2023-47143 | Critical | 10.0 | 2024-02-02 | IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection, caused by improper validation of input by… |
CVE-2024-0987 | Medium | 6.3 | 2024-01-29 | A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log… |
CVE-2024-22229 | Low | 3.1 | 2024-01-24 | Dell Unity, versions prior to 5.4, contain a vulnerability whereby log messages can be spoofed by an authenticated attacker. An attacker could exploit this vu… |
CVE-2023-28738 | High | 7.5 | 2024-01-19 | Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a privileged user to potentially enable escalation of privilege via… |
CVE-2023-7234 | Medium | 5.3 | 2024-01-16 | OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description field. |
CVE-2024-0233 | Medium | 6.1 | 2024-01-16 | The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not properly sanitise and escape a parameter before outputting it back in p… |
CVE-2023-6005 | Medium | 4.8 | 2024-01-16 | The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 does not sanitize and escape some of its settings, which could allow high priv… |
CVE-2023-52102 | High | 7.5 | 2024-01-16 | Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52098 | High | 7.5 | 2024-01-16 | Denial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability. |
CVE-2024-22199 | Critical | 9.3 | 2024-01-11 | This package provides universal methods to use multiple template engines with the Fiber web framework using the Views interface. This vulnerability specificall… |
CVE-2023-42183 | Medium | 5.3 | 2023-12-15 | lockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of intended access restrictions, such as wh… |
CVE-2023-45539 | High | 8.2 | 2023-11-28 | HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impac… |
CVE-2023-26279 | Low | 3.3 | 2023-11-24 | IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160. |
CVE-2023-38316 | Critical | 9.8 | 2023-11-17 | An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS comma… |
CVE-2023-48655 | Critical | 9.8 | 2023-11-17 | An issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters. |
CVE-2023-40453 | Medium | 6.5 | 2023-11-07 | Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, which might potentially trick an administr… |
CVE-2023-5968 | Medium | 4.9 | 2023-11-06 | Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body. |
CVE-2023-4393 | Medium | 5.4 | 2023-10-30 | HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against… |
CVE-2023-45135 | Critical | 9.0 | 2023-10-25 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In `org.xwiki.platform:xwiki-platform-web` versions 7… |
CVE-2023-46301 | Critical | 9.8 | 2023-10-22 | iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to upload. |
CVE-2023-46300 | Critical | 9.8 | 2023-10-22 | iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to tmux integration. |
CVE-2023-5654 | Medium | 6.5 | 2023-10-19 | The React Developer Tools extension registers a message listener with window.addEventListener('message', <listener>) in a content script that is accessible to… |
CVE-2023-43620 | High | 7.8 | 2023-09-20 | An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver. |
CVE-2023-41889 | Medium | 5.3 | 2023-09-15 | SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalization issue. This happens when a logical v… |
CVE-2023-37875 | Low | 3.0 | 2023-09-12 | Improper encoding or escaping of output in Wing FTP Server (User Web Client) allows Cross-Site Scripting (XSS).This issue affects Wing FTP Server: <= 7.2.0. |
CVE-2023-4571 | High | 8.6 | 2023-08-30 | In Splunk IT Service Intelligence (ITSI) versions below below 4.13.3, 4.15.3, or 4.17.1, a malicious actor can inject American National Standards Institute (AN… |
CVE-2023-3481 | Medium | 5.7 | 2023-08-21 | Critters versions 0.0.17-0.0.19 have an issue when parsing the HTML, which leads to a potential cross-site scripting (XSS) bug. We recommend upgrading to versi… |
CVE-2023-39390 | High | 7.5 | 2023-08-13 | Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the devi… |
CVE-2023-39386 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps t… |
CVE-2023-39382 | High | 7.5 | 2023-08-13 | Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart. |
CVE-2023-39381 | High | 7.5 | 2023-08-13 | Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2022-36392 | High | 8.6 | 2023-08-11 | Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, 12.0.93, 14.1.70… |
CVE-2023-40014 | Medium | 5.3 | 2023-08-10 | OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using `ERC2771Contex… |
CVE-2023-39527 | High | 8.3 | 2023-08-07 | PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCle… |
CVE-2023-3997 | High | 8.6 | 2023-07-31 | Splunk SOAR versions lower than 6.1.0 are indirectly affected by a potential vulnerability accessed through the user’s terminal. A third party can send Splunk… |
CVE-2022-43713 | High | 7.5 | 2023-07-26 | Interactive Forms (IAF) in GX Software XperienCentral versions 10.33.1 until 10.35.0 was vulnerable to invalid data input because form validation could be bypa… |
CVE-2022-31458 | Medium | 6.1 | 2023-07-25 | RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning. |
CVE-2023-35941 | High | 8.6 | 2023-07-25 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, a malici… |
CVE-2023-34036 | Medium | 5.3 | 2023-07-17 | Reactive web applications that use Spring HATEOAS to produce hypermedia-based responses might be exposed to malicious forwarded headers if they are not behind… |
CVE-2023-3668 | High | 7.2 | 2023-07-14 | Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21. |
CVE-2023-24480 | Critical | 9.8 | 2023-07-13 | Controller DoS due to stack overflow when decoding a message from the server. See Honeywell Security Notification for recommendations on upgrading and versio… |
CVE-2023-2200 | Medium | 4.1 | 2023-07-13 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14 before 15.11.10, all versions starting from 16.0 before 16.0.6, all vers… |
CVE-2023-36921 | High | 7.2 | 2023-07-11 | SAP Solution Manager (Diagnostics agent) - version 7.20, allows an attacker to tamper with headers in a client request. This misleads SAP Diagnostics Agent to… |
CVE-2023-36919 | Medium | 5.3 | 2023-07-11 | In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Referrer-Policy response header is not i… |
CVE-2023-3552 | Medium | 5.4 | 2023-07-08 | Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10. |
CVE-2023-32301 | Low | 3.1 | 2023-06-13 | Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branche… |
CVE-2023-3190 | Medium | 4.6 | 2023-06-10 | Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9. |
CVE-2023-29543 | High | 8.8 | 2023-06-02 | An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerabil… |
CVE-2023-29541 | High | 8.8 | 2023-06-02 | Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug… |
CVE-2023-23599 | Medium | 6.5 | 2023-06-02 | When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands… |
CVE-2023-32712 | High | 8.6 | 2023-06-01 | In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker can inject American National Standards Institute (ANSI) escape codes into Splun… |
CVE-2023-1711 | Medium | 4.0 | 2023-05-30 | A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If exploited… |
CVE-2023-31669 | Medium | 5.5 | 2023-05-23 | WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote ("). |
CVE-2023-32071 | Critical | 9.0 | 2023-05-09 | XWiki Platform is a generic wiki platform. Starting in versions 2.2-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, it's possible to execute… |
CVE-2023-30844 | Low | 3.0 | 2023-05-08 | Mutagen provides real-time file synchronization and flexible network forwarding for developers. Prior to versions 0.16.6 and 0.17.1 in `mutagen` and prior to v… |
CVE-2022-30351 | High | 7.5 | 2023-03-30 | PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted information from a supplied PDF file, does… |
CVE-2023-28733 | High | 7.2 | 2023-03-30 | AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when acce… |
CVE-2022-46387 | Critical | 9.8 | 2023-03-28 | ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which allows an attacker to change the title and… |
CVE-2022-42948 | Critical | 9.8 | 2023-03-24 | Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely… |
CVE-2023-28101 | Medium | 5.0 | 2023-03-16 | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, i… |
CVE-2023-28487 | Medium | 5.3 | 2023-03-16 | Sudo before 1.9.13 does not escape control characters in sudoreplay output. |
CVE-2023-28486 | Medium | 5.3 | 2023-03-16 | Sudo before 1.9.13 does not escape control characters in log messages. |
CVE-2023-26472 | Critical | 9.9 | 2023-03-02 | XWiki Platform is a generic wiki platform. Starting in version 6.2-milestone-1, one can execute any wiki content with the right of IconThemeSheet author by cre… |
CVE-2023-0595 | Medium | 5.3 | 2023-02-24 | A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to… |
CVE-2022-48339 | High | 7.8 | 2023-02-20 | An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file… |
CVE-2022-45102 | Medium | 5.4 | 2023-02-01 | Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentiall… |
CVE-2015-10040 | Medium | 5.4 | 2023-01-13 | A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/confi… |
CVE-2022-45143 | High | 7.5 | 2023-01-03 | The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circ… |
CVE-2015-10011 | Medium | 4.6 | 2023-01-02 | A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipul… |
CVE-2020-36567 | High | 7.5 | 2022-12-27 | Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines. |
CVE-2022-28284 | High | 8.8 | 2022-12-22 | SVG's <code><use></code> element could have been used to load unexpected content that could have executed script in certain circumstances. While the spec… |