CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 47)
Page 47 of 55 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-26148 | Medium | 5.4 | 2023-09-29 | All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r… |
CVE-2023-43656 | Medium | 5.6 | 2023-09-27 | matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. Instances that have enabled transformation functions (… |
CVE-2022-3962 | Medium | 4.3 | 2023-09-23 | A content spoofing vulnerability was found in Kiali. It was discovered that Kiali does not implement error handling when the page or endpoint being accessed ca… |
CVE-2023-41834 | Medium | 6.1 | 2023-09-19 | Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers to inject arbitrary… |
CVE-2023-36250 | High | 7.8 | 2023-09-14 | CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new rec… |
CVE-2023-26142 | Medium | 6.5 | 2023-09-12 | All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values. Header values are not prop… |
CVE-2023-4843 | Medium | 4.3 | 2023-09-08 | Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only… |
CVE-2023-39424 | Critical | 9.9 | 2023-09-07 | A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary content (such as a web… |
CVE-2023-1523 | Critical | 10.0 | 2023-09-01 | Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary co… |
CVE-2023-41039 | High | 8.3 | 2023-08-30 | RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format… |
CVE-2023-4548 | Medium | 6.3 | 2023-08-26 | A vulnerability has been found in SPA-Cart eCommerce CMS 1.9.0.3. The impacted element is an unknown function of the file /search of the component GET Paramete… |
CVE-2023-4478 | Medium | 4.3 | 2023-08-25 | Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to register users as inactive, thus blocking… |
CVE-2023-40035 | High | 7.2 | 2023-08-23 | Craft is a CMS for creating custom digital experiences on the web and beyond. Bypassing the validatePath function can lead to potential remote code execution… |
CVE-2023-4212 | Medium | 6.8 | 2023-08-22 | A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root usin… |
CVE-2023-4450 | Medium | 6.3 | 2023-08-21 | A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2022-24989 | Critical | 9.8 | 2023-08-20 | TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instanti… |
CVE-2023-39662 | Critical | 9.8 | 2023-08-15 | An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function. |
CVE-2023-39661 | Critical | 9.8 | 2023-08-15 | An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary code via the _is_jailbreak function. |
CVE-2023-39659 | Critical | 9.8 | 2023-08-15 | An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run c… |
CVE-2023-38896 | Critical | 9.8 | 2023-08-15 | An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_p… |
CVE-2020-28848 | High | 8.8 | 2023-08-11 | CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file. |
CVE-2023-31209 | High | 8.8 | 2023-08-10 | Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated u… |
CVE-2023-33242 | Critical | 9.6 | 2023-08-09 | Crypto wallets implementing the Lindell17 TSS protocol might allow an attacker to extract the full ECDSA private key by exfiltrating a single bit in every sign… |
CVE-2023-33241 | Critical | 9.6 | 2023-08-09 | Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and… |
CVE-2023-39213 | Critical | 9.6 | 2023-08-08 | Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an… |
CVE-2023-4157 | Medium | 5.2 | 2023-08-04 | CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4… |
CVE-2023-36210 | Critical | 9.8 | 2023-08-01 | MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the keyword parameter. |
CVE-2023-38609 | High | 7.5 | 2023-07-28 | An injection issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass certain Privacy prefer… |
CVE-2023-38060 | Medium | 6.3 | 2023-07-24 | Improper Input Validation vulnerability in the ContentType parameter for attachments on TicketCreate or TicketUpdate operations of the OTRS Generic Interface m… |
CVE-2020-24275 | Medium | 6.5 | 2023-07-20 | A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying a crafted URL. |
CVE-2023-37897 | High | 7.2 | 2023-07-18 | Grav is a file-based Web-platform built in PHP. Grav is subject to a server side template injection (SSTI) vulnerability. The fix for another SSTI vulnerabilit… |
CVE-2023-3694 | Medium | 6.3 | 2023-07-17 | A vulnerability, which was classified as critical, has been found in SourceCodester/projectworlds House Rental and Property Listing 1.0. This issue affects som… |
CVE-2023-37473 | High | 8.5 | 2023-07-14 | zenstruck/collections is a set of helpers for iterating/paginating/filtering collections. Passing _callable strings_ (ie `system`) caused the function to be ex… |
CVE-2023-37462 | Critical | 9.9 | 2023-07-14 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document `SkinsCode.XWikiSkin… |
CVE-2023-36830 | Medium | 6.3 | 2023-07-06 | SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerab… |
CVE-2023-36188 | Critical | 9.8 | 2023-07-06 | An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method. |
CVE-2023-26138 | Medium | 5.4 | 2023-07-06 | All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input is used to set request headers in the addHeader f… |
CVE-2023-36812 | Critical | 9.8 | 2023-06-30 | OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-con… |
CVE-2023-37360 | Medium | 5.9 | 2023-06-30 | pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be… |
CVE-2023-36470 | Critical | 9.9 | 2023-06-29 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creating a new or editing an existing docume… |
CVE-2023-36469 | Critical | 9.9 | 2023-06-29 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile and notif… |
CVE-2023-36471 | Critical | 9.0 | 2023-06-29 | Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowed form and… |
CVE-2023-34203 | High | 8.8 | 2023-06-23 | In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM or OEE role) could perform a URL injecti… |
CVE-2023-3380 | Medium | 4.7 | 2023-06-23 | A vulnerability classified as critical has been found in Wavlink WN579X3 up to 20230615. Affected is an unknown function of the file /cgi-bin/adm.cgi of the co… |
CVE-2023-28016 | Low | 3.1 | 2023-06-22 | Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Ba… |
CVE-2023-35810 | High | 7.2 | 2023-06-17 | An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection vulnerability has been identified in t… |
CVE-2023-2797 | Low | 3.1 | 2023-06-16 | Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a chan… |
CVE-2023-28599 | Medium | 4.3 | 2023-06-13 | Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their display name potentially leading a victi… |
CVE-2023-28598 | High | 7.5 | 2023-06-13 | Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in a Zoom app… |
CVE-2023-29405 | Critical | 9.8 | 2023-06-08 | The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other c… |
CVE-2019-25150 | High | 8.8 | 2023-06-07 | The Email Templates plugin for WordPress is vulnerable to HTML Injection in versions up to, and including, 1.3. This makes it possible for attackers to present… |
CVE-2022-47028 | Medium | 5.5 | 2023-05-30 | An issue discovered in Action Launcher for Android v50.5 allows an attacker to cause a denial of service via arbitary data injection to function insert. |
CVE-2023-2980 | Medium | 6.3 | 2023-05-30 | A vulnerability classified as critical was found in Abstrium Pydio Cells 4.2.0. This vulnerability affects unknown code of the component User Creation Handler… |
CVE-2023-33234 | High | 7.2 | 2023-05-30 | Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection… |
CVE-2023-26130 | High | 7.5 | 2023-05-30 | Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in… |
CVE-2023-32679 | High | 7.2 | 2023-05-19 | Craft CMS is an open source content management system. In affected versions of Craft CMS an unrestricted file extension may lead to Remote Code Execution. If t… |
CVE-2023-32314 | Critical | 9.8 | 2023-05-15 | vm2 is a sandbox that can run untrusted code with Node's built-in modules. A sandbox escape vulnerability exists in vm2 for versions up to and including 3.9.17… |
CVE-2023-32313 | Medium | 5.3 | 2023-05-15 | vm2 is a sandbox that can run untrusted code with Node's built-in modules. In versions 3.9.17 and lower of vm2 it was possible to get a read-write reference to… |
CVE-2023-29400 | High | 7.3 | 2023-05-11 | Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed… |
CVE-2023-24539 | High | 7.3 | 2023-05-11 | Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character… |
CVE-2022-45048 | High | 8.4 | 2023-05-05 | Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache… |
CVE-2023-29827 | Critical | 9.8 | 2023-05-04 | ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration se… |
CVE-2022-45801 | Medium | 5.4 | 2023-05-01 | Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP st… |
CVE-2023-2378 | High | 7.2 | 2023-04-28 | A flaw has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown function of the component Web Management Interface. This manipulat… |
CVE-2023-2377 | High | 7.2 | 2023-04-28 | A vulnerability was detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The impacted element is an unknown function of the component Web Management Interfa… |
CVE-2023-2376 | High | 7.2 | 2023-04-28 | A security vulnerability has been detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The affected element is an unknown function of the component Web Mana… |
CVE-2023-2375 | High | 7.2 | 2023-04-28 | A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interface. Execut… |
CVE-2023-2374 | High | 7.2 | 2023-04-28 | A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This issue affects some unknown processing of the component Web Management I… |
CVE-2023-2373 | High | 7.2 | 2023-04-28 | A vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This vulnerability affects unknown code of the component Web Management Interface… |
CVE-2023-30609 | Medium | 5.4 | 2023-04-25 | matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page. Prior to version 3.71.0, plain text messages containing HTML tag… |
CVE-2023-29007 | High | 7.0 | 2023-04-25 | Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially cra… |
CVE-2022-23721 | Low | 3.8 | 2023-04-25 | PingID integration for Windows login prior to 2.9 does not handle duplicate usernames, which can lead to a username collision when two people with the same use… |
CVE-2023-22621 | High | 7.2 | 2023-04-19 | Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the server. A remote attacke… |
CVE-2023-29527 | Critical | 9.9 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions a user without script or programm… |
CVE-2023-29526 | Critical | 9.9 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to display or inter… |
CVE-2023-29525 | Critical | 9.9 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to code injecti… |
CVE-2023-29524 | Critical | 9.9 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute anything with the right of th… |
CVE-2023-29523 | Critical | 9.9 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile can execu… |
CVE-2023-29522 | Critical | 9.9 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitrary script… |
CVE-2023-29521 | High | 8.4 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitrary Groovy… |
CVE-2023-29519 | Critical | 9.0 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A registered user can perform remote code execution le… |
CVE-2023-29518 | Critical | 9.9 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitrary Groovy… |
CVE-2023-29516 | Critical | 9.9 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights on `XWiki.AttachmentSelector… |
CVE-2023-29514 | Critical | 9.9 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on any document (e.g., their… |
CVE-2023-29512 | Critical | 9.9 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on a page (e.g., it's own us… |
CVE-2023-29510 | Critical | 9.9 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In XWiki, every user can add translations that are onl… |
CVE-2023-30547 | Critical | 9.8 | 2023-04-17 | vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versio… |
CVE-2023-29213 | Critical | 9.0 | 2023-04-17 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of `org.xwiki.platform:xwiki-plat… |
CVE-2023-29383 | Low | 3.3 | 2023-04-14 | In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to explo… |
CVE-2023-26919 | High | 7.2 | 2023-04-10 | delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to… |
CVE-2023-29389 | Medium | 6.8 | 2023-04-05 | Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessin… |
CVE-2023-29374 | Critical | 9.8 | 2023-04-05 | In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method. |
CVE-2023-28853 | High | 7.7 | 2023-04-04 | Mastodon is a free, open-source social network server based on ActivityPub Mastodon allows configuration of LDAP for authentication. Starting in version 2.5.0… |
CVE-2022-43769 | High | 8.8 | 2023-04-03 | Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values whic… |
CVE-2023-27533 | High | 8.8 | 2023-03-30 | A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted use… |
CVE-2023-28637 | High | 8.0 | 2023-03-28 | DataEase is an open source data visualization analysis tool. In Dataease users are normally allowed to modify data and the data sources are expected to properl… |
CVE-2023-26493 | High | 8.1 | 2023-03-27 | Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github repo for Cocos Engine the `web-interfa… |
CVE-2023-27040 | Critical | 9.8 | 2023-03-16 | Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter. |
CVE-2023-25616 | Critical | 9.9 | 2023-03-14 | In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerabil… |
CVE-2023-1287 | Critical | 9.0 | 2023-03-09 | An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution. |