CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 42)
Page 42 of 51 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-41111 | High | 7.2 | 2024-07-18 | Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Slive… |
CVE-2024-20429 | Medium | 6.5 | 2024-07-17 | A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenticated, remote attacker to execute arbitr… |
CVE-2024-40637 | Medium | 4.2 | 2024-07-16 | dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. When a user install… |
CVE-2024-38700 | Medium | 6.5 | 2024-07-12 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in realmag777 WPCS allows Code Injection.This… |
CVE-2024-36522 | Critical | 9.8 | 2024-07-12 | The default configuration of XSLTResourceStream.java is vulnerable to remote code execution via XSLT injection when processing input from an untrusted source w… |
CVE-2024-37442 | Low | 3.8 | 2024-07-09 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Photo Gallery Team Photo Gallery by Ays all… |
CVE-2024-37253 | Low | 2.7 | 2024-07-09 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in WpDirectoryKit WP Directory Kit allows Code… |
CVE-2024-35777 | Low | 3.5 | 2024-07-09 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Automattic WooCommerce allows Content Spoof… |
CVE-2024-6470 | Low | 2.7 | 2024-07-03 | A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=m… |
CVE-2024-6469 | Low | 2.7 | 2024-07-03 | A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index… |
CVE-2024-38366 | Critical | 10.0 | 2024-07-01 | trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager. The part of trunk which verifies whether a user has a real email addres… |
CVE-2024-36420 | High | 7.5 | 2024-07-01 | Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, the `/api/v1/openai-assistants-file` endp… |
CVE-2024-39704 | Critical | 9.8 | 2024-06-28 | Soft Circle French-Bread Melty Blood: Actress Again: Current Code through 1.07 Rev. 1.4.0 allows a remote attacker to execute arbitrary code on a client's mach… |
CVE-2024-39243 | Critical | 9.8 | 2024-06-26 | An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save. |
CVE-2024-37759 | Critical | 9.8 | 2024-06-24 | DataGear v5.0.0 and earlier was discovered to contain a SpEL (Spring Expression Language) expression injection vulnerability via the Data Viewing interface. |
CVE-2024-35728 | Medium | 5.3 | 2024-06-10 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Themeisle PPOM for WooCommerce allows Code… |
CVE-2024-5184 | Medium | 6.5 | 2024-06-05 | The EmailGPT service contains a prompt injection vulnerability. The service uses an API service that allows a malicious user to inject a direct prompt and take… |
CVE-2023-23738 | Medium | 5.3 | 2024-06-03 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Brainstorm Force Spectra allows Content Spo… |
CVE-2024-34448 | High | 8.8 | 2024-05-22 | Ghost before 5.82.0 allows CSV Injection during a member CSV export. |
CVE-2024-5193 | Medium | 5.3 | 2024-05-22 | A security vulnerability has been detected in Ritlabs TinyWeb Server 1.94. This vulnerability affects unknown code of the component Request Handler. The manipu… |
CVE-2024-34919 | Critical | 9.8 | 2024-05-17 | An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay Online E-Learning System using PHP/MySQL v1.0 allows attackers to e… |
CVE-2024-34697 | High | 7.6 | 2024-05-14 | FreeScout is a free, self-hosted help desk and shared mailbox. A stored HTML Injection vulnerability has been identified in the Email Receival Module of the Fr… |
CVE-2024-34062 | Medium | 4.8 | 2024-05-03 | tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through p… |
CVE-2024-32986 | Critical | 9.6 | 2024-05-03 | PWAsForFirefox is a tool to install, manage and use Progressive Web Apps (PWAs) in Mozilla Firefox. Due to improper sanitization of web app properties (such as… |
CVE-2023-46304 | High | 8.1 | 2024-04-30 | modules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a remote authenticated attacker to run arbitrary PHP code because an unprotected endpoint allows the… |
CVE-2023-48709 | High | 8.0 | 2024-04-15 | iTop is an IT service management platform. When exporting data from backoffice or portal in CSV or Excel files, users' inputs may include malicious formulas t… |
CVE-2024-3767 | Medium | 6.3 | 2024-04-15 | A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vulnerability affects unknown code of the file /admin/edit-post.php. The m… |
CVE-2024-28234 | Medium | 4.3 | 2024-04-09 | Contao is an open source content management system. Starting in version 2.0.0 and prior to versions 4.13.40 and 5.3.4, it is possible to inject CSS styles via… |
CVE-2024-28191 | Low | 3.1 | 2024-04-09 | Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, it is possible to inject insert tags in f… |
CVE-2024-3366 | Low | 3.5 | 2024-04-06 | A vulnerability classified as problematic was found in Xuxueli xxl-job up to 2.4.1. This vulnerability affects the function deserialize of the file com/xxl/job… |
CVE-2024-28867 | Medium | 5.9 | 2024-03-29 | Swift Prometheus is a Swift client for the Prometheus monitoring system, supporting counters, gauges and histograms. In code which applies _un-sanitized string… |
CVE-2024-29896 | High | 7.5 | 2024-03-28 | Astro-Shield is a library to compute the subresource integrity hashes for your JS scripts and CSS stylesheets. When automated CSP headers generation for SSR co… |
CVE-2024-2777 | Medium | 6.3 | 2024-03-22 | A vulnerability has been found in Campcodes/PHPGurukul Online Marriage Registration System 1.0 and classified as critical. Affected by this vulnerability is an… |
CVE-2024-2769 | Medium | 6.3 | 2024-03-21 | A vulnerability was detected in Campcodes Complete Online Beauty Parlor Management System 1.0. The affected element is an unknown function of the file /admin/a… |
CVE-2024-29027 | Critical | 9.0 | 2024-03-19 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 6.5.5 and 7.0.0-alpha.29, calling an… |
CVE-2024-23333 | High | 7.9 | 2024-03-18 | LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM's log configuration allows to specify arbitrary paths for log… |
CVE-2024-2445 | Medium | 6.1 | 2024-03-15 | Mattermost Jira plugin versions shipped with Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to es… |
CVE-2024-28181 | High | 8.1 | 2024-03-14 | turbo_boost-commands is a set of commands to help you build robust reactive applications with Rails & Hotwire. TurboBoost Commands has existing protections in… |
CVE-2024-28192 | Medium | 5.3 | 2024-03-13 | your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify version <1.8.0 is vulnerable to NoSQL injection in the public access token… |
CVE-2024-28114 | High | 8.1 | 2024-03-12 | Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to Remote Code Execution in Peering Manage… |
CVE-2024-0044 | Medium | 6.7 | 2024-03-11 | In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalat… |
CVE-2024-21900 | Medium | 4.3 | 2024-03-08 | An injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users… |
CVE-2024-23280 | Medium | 6.5 | 2024-03-08 | An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS… |
CVE-2024-23274 | High | 7.8 | 2024-03-08 | An injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app… |
CVE-2024-23268 | High | 7.8 | 2024-03-08 | An injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app… |
CVE-2024-1773 | High | 8.8 | 2024-03-07 | The PDF Invoices and Packing Slips For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.7 via d… |
CVE-2024-21838 | Medium | 6.8 | 2024-03-05 | Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead to HTML code injec… |
CVE-2024-2064 | Medium | 4.3 | 2024-03-01 | A vulnerability has been found in rahman SelectCours 1.0 and classified as problematic. Affected by this vulnerability is the function getCacheNames of the fil… |
CVE-2024-1619 | Medium | 6.1 | 2024-02-29 | Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrat… |
CVE-2024-1128 | Medium | 5.4 | 2024-02-29 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 2.6.0. This is… |
CVE-2024-21742 | Medium | 5.3 | 2024-02-27 | Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to ad… |
CVE-2024-1833 | High | 7.3 | 2024-02-23 | A vulnerability was found in SourceCodester Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2023-51653 | Critical | 9.8 | 2024-02-22 | Hertzbeat is a real-time monitoring system. In the implementation of `JmxCollectImpl.java`, `JMXConnectorFactory.connect` is vulnerable to JNDI injection. The… |
CVE-2023-51388 | Critical | 9.8 | 2024-02-22 | Hertzbeat is a real-time monitoring system. In `CalculateAlarm.java`, `AviatorEvaluator` is used to directly execute the expression function, and no security p… |
CVE-2024-23830 | High | 8.3 | 2024-02-20 | MantisBT is an open source issue tracker. Prior to version 2.26.1, an unauthenticated attacker who knows a user's email address and username can hijack the use… |
CVE-2024-25625 | High | 8.1 | 2024-02-19 | Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. A potential security vulnerability has been discovered in `pimcore/admin-ui-classic-bundle` p… |
CVE-2024-22319 | High | 8.1 | 2024-02-02 | IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to remote code execution attack via JNDI injec… |
CVE-2023-51446 | Medium | 5.9 | 2024-02-01 | GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication form can be used to perform LDAP inject… |
CVE-2023-51939 | High | 8.8 | 2024-02-01 | An issue in the cp_bbs_sig function in relic/src/cp/relic_cp_bbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and es… |
CVE-2023-36260 | High | 7.5 | 2024-01-30 | An issue was discovered in the Feed Me plugin 4.6.1 for Craft CMS. It allows remote attackers to cause a denial of service (DoS) via crafted strings to Feed-Me… |
CVE-2024-23828 | High | 8.8 | 2024-01-29 | Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execution via CRLF attack when changing the… |
CVE-2024-23648 | High | 8.8 | 2024-01-24 | Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. The password reset functionality sends to the the user requesting a password chan… |
CVE-2024-0579 | Medium | 6.3 | 2024-01-16 | A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of th… |
CVE-2021-4227 | Medium | 5.3 | 2024-01-16 | The ark-commenteditor WordPress plugin through 2.15.6 does not properly sanitise or encode the comments when in Source editor, allowing attackers to inject an… |
CVE-2023-22527 | Critical | 9.8 | 2024-01-16 | A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected inst… |
CVE-2023-4818 | High | 7.6 | 2024-01-15 | PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be u… |
CVE-2023-42136 | High | 7.8 | 2024-01-15 | PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account pr… |
CVE-2023-42135 | Medium | 6.8 | 2024-01-15 | PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via parameter injection by bypassing the in… |
CVE-2024-0552 | Critical | 9.8 | 2024-01-15 | Intumit inc. SmartRobot's web framwork has a remote code execution vulnerability. An unauthorized remote attacker can exploit this vulnerability to execute arb… |
CVE-2023-31025 | Medium | 6.5 | 2024-01-12 | NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to informa… |
CVE-2024-21645 | Medium | 5.3 | 2024-01-08 | pyLoad is the free and open-source Download Manager written in pure Python. A log injection vulnerability was identified in `pyload` allowing any unauthenticat… |
CVE-2023-29050 | High | 7.6 | 2024-01-08 | The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outside of the intended hi… |
CVE-2023-6004 | Medium | 4.8 | 2024-01-03 | A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow… |
CVE-2023-50093 | Medium | 6.1 | 2024-01-03 | APIIDA API Gateway Manager for Broadcom Layer7 v2023.2.2 is vulnerable to Host Header Injection. |
CVE-2023-39655 | Critical | 9.6 | 2024-01-03 | A host header injection vulnerability exists in the NPM package @perfood/couch-auth versions <= 0.20.0. By sending a specially crafted host header in the forgo… |
CVE-2024-21623 | Critical | 9.8 | 2024-01-02 | OTCLient is an alternative tibia client for otserv. Prior to commit db560de0b56476c87a2f967466407939196dd254, the /mehah/otclient "`Analysis - SonarCloud`" wor… |
CVE-2023-7114 | High | 7.1 | 2023-12-29 | Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server. |
CVE-2023-52081 | Medium | 5.3 | 2023-12-28 | ffcss is a CLI interface to apply and configure Firefox CSS themes. Prior to 0.2.0, the function `lookupPreprocess()` is meant to apply some transformations to… |
CVE-2023-51664 | High | 7.3 | 2023-12-27 | tj-actions/changed-files is a Github action to retrieve all files and directories. Prior to 41.0.0, the `tj-actions/changed-files` workflow allows for command… |
CVE-2023-49328 | High | 7.2 | 2023-12-25 | On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code executi… |
CVE-2023-7100 | Medium | 6.3 | 2023-12-25 | A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /ad… |
CVE-2023-7096 | Medium | 4.7 | 2023-12-25 | A flaw has been found in code-projects Faculty Management System 1.0. The affected element is an unknown function of the file /admin/php/crud.php. This manipul… |
CVE-2023-7039 | Medium | 6.3 | 2023-12-21 | A vulnerability classified as critical has been found in Byzoro S210 up to 20231210. Affected is an unknown function of the file /importexport.php. The manipul… |
CVE-2023-35895 | Medium | 6.3 | 2023-12-20 | IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API… |
CVE-2023-46726 | High | 7.2 | 2023-12-13 | GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, on PHP 7.4 only, the LDAP server configuratio… |
CVE-2023-43364 | Critical | 9.8 | 2023-12-12 | main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution. |
CVE-2023-46456 | Critical | 9.8 | 2023-12-12 | In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality. |
CVE-2023-49964 | High | 8.8 | 2023-12-11 | An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may per… |
CVE-2023-6648 | High | 7.3 | 2023-12-10 | A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file… |
CVE-2023-48841 | High | 8.8 | 2023-12-07 | Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language > Labels > Export action. |
CVE-2023-48835 | High | 8.8 | 2023-12-07 | Car Rental Script v3.0 is vulnerable to CSV Injection via a Language > Labels > Export action. |
CVE-2023-48830 | High | 8.8 | 2023-12-07 | Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export. |
CVE-2023-48826 | High | 8.8 | 2023-12-07 | Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List. |
CVE-2023-48205 | Medium | 5.3 | 2023-12-07 | Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated with password reset emails. |
CVE-2023-6458 | High | 7.1 | 2023-12-06 | Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perform a client-side path traversal. |
CVE-2023-22522 | High | 8.8 | 2023-12-06 | This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input into a Confluence page… |
CVE-2023-35075 | Low | 3.1 | 2023-11-27 | Mattermost fails to use innerText / textContent when setting the channel name in the webapp during autocomplete, allowing an attacker to inject HTML to a vict… |
CVE-2023-49214 | Critical | 9.8 | 2023-11-23 | Usedesk before 1.7.57 allows chat template injection. |
CVE-2023-6164 | Low | 2.2 | 2023-11-22 | The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to CSS Injection via the ‘newColor’ parameter in… |
CVE-2023-5340 | Critical | 9.8 | 2023-11-20 | The Five Star Restaurant Menu and Food Ordering WordPress plugin before 2.4.11 unserializes user input via an AJAX action available to unauthenticated users, a… |