CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 47)
Page 47 of 51 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-21372 | High | 8.3 | 2021-03-26 | Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places… |
CVE-2020-7464 | Medium | 5.3 | 2021-03-26 | In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming… |
CVE-2021-21333 | Medium | 6.1 | 2021-03-26 | Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP… |
CVE-2021-3027 | Medium | 6.5 | 2021-03-26 | app/views_mod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting of special queries… |
CVE-2021-29156 | High | 7.5 | 2021-03-25 | ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform character-by-character re… |
CVE-2021-1432 | High | 7.3 | 2021-03-24 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operati… |
CVE-2021-27908 | Medium | 5.8 | 2021-03-23 | In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user through leveraging… |
CVE-2021-28963 | Medium | 5.3 | 2021-03-22 | Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters. |
CVE-2021-26069 | Medium | 5.3 | 2021-03-22 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and enumerate project keys via an… |
CVE-2020-36144 | Medium | 5.3 | 2021-03-18 | Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided template since the user… |
CVE-2021-24144 | High | 7.8 | 2021-03-18 | Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrar… |
CVE-2020-4851 | Medium | 5.5 | 2021-03-16 | IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development effo… |
CVE-2021-22191 | Medium | 6.3 | 2021-03-15 | Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file. |
CVE-2020-14987 | High | 7.2 | 2021-03-11 | An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows remote attackers to execute arbitrary code because there is a m… |
CVE-2021-21381 | High | 7.1 | 2021-03-11 | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2… |
CVE-2021-21510 | Medium | 6.1 | 2021-03-08 | Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnera… |
CVE-2021-21313 | Medium | 4.9 | 2021-03-03 | GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before… |
CVE-2021-21353 | Medium | 6.8 | 2021-03-03 | Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the `pretty` option o… |
CVE-2021-27730 | Critical | 9.8 | 2021-03-02 | Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint. The fixed version is FTA_9_12_444 and lat… |
CVE-2021-27132 | Critical | 9.8 | 2021-02-27 | SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header. |
CVE-2021-3197 | Critical | 9.8 | 2021-02-27 | An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument… |
CVE-2021-26068 | High | 8.8 | 2021-02-22 | An endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15 allows remote attackers to execute arbitrary code via a template… |
CVE-2020-12873 | High | 8.8 | 2021-02-19 | An issue was discovered in Alfresco Enterprise Content Management (ECM) before 6.2.1. A user with privileges to edit a FreeMarker template (e.g., a webscript)… |
CVE-2021-21316 | Medium | 6.3 | 2021-02-16 | less-openui5 is an npm package which enables building OpenUI5 themes with Less.js. In less-openui5 before version 0.10., when processing theming resources (i.e… |
CVE-2020-35564 | High | 7.5 | 2021-02-16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an outdated and unused component allowing for malicious user i… |
CVE-2020-35775 | Critical | 9.8 | 2021-02-15 | CITSmart before 9.1.2.23 allows LDAP Injection. |
CVE-2021-20644 | Medium | 6.1 | 2021-02-12 | ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page. |
CVE-2021-23335 | High | 7.5 | 2021-02-11 | All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure. |
CVE-2021-21479 | Critical | 9.1 | 2021-02-09 | In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system. |
CVE-2021-21141 | Medium | 6.5 | 2021-02-09 | Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a craft… |
CVE-2021-21137 | Medium | 6.5 | 2021-02-09 | Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk… |
CVE-2021-21305 | High | 7.4 | 2021-02-08 | CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and… |
CVE-2021-21303 | Medium | 5.9 | 2021-02-05 | Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured K… |
CVE-2021-1221 | Medium | 4.1 | 2021-02-04 | A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject… |
CVE-2021-21277 | High | 8.5 | 2021-02-01 | angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before version 1.1.2 there is… |
CVE-2020-15690 | Critical | 9.8 | 2021-01-30 | In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character. |
CVE-2021-21278 | High | 8.6 | 2021-01-26 | RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 (non-semantic versioning) there is a risk of code in… |
CVE-2021-21263 | High | 7.2 | 2021-01-19 | Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies t… |
CVE-2021-21249 | Critical | 9.6 | 2021-01-15 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is an issue involving YAML parsing which can lead to post-auth remote code execu… |
CVE-2021-21248 | Critical | 9.6 | 2021-01-15 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability involving the build endpoint parameters. InputSpec i… |
CVE-2021-21247 | Critical | 9.6 | 2021-01-15 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the application's BasePage registers an AJAX event listener (`AbstractPostAjaxBehavior… |
CVE-2021-21242 | Critical | 10.0 | 2021-01-15 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lead to pre-auth remote code execution. At… |
CVE-2021-21244 | Critical | 10.0 | 2021-01-15 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server side template injection via Bean… |
CVE-2021-21243 | Critical | 10.0 | 2021-01-15 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods that deserialize untrusted data from th… |
CVE-2021-21261 | High | 7.3 | 2021-01-14 | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the `flatpak-portal` service that… |
CVE-2020-26298 | Medium | 6.8 | 2021-01-11 | Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scrip… |
CVE-2020-5019 | Medium | 6.5 | 2021-01-08 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending… |
CVE-2020-27260 | Medium | 5.3 | 2021-01-08 | Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 HL7 v2.x injection vulnerabilities exist in the affected products that allow physically pro… |
CVE-2020-28468 | High | 8.1 | 2021-01-08 | This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection… |
CVE-2020-26293 | Medium | 6.1 | 2021-01-04 | HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372… |
CVE-2020-10208 | Critical | 9.9 | 2020-12-30 | Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows aut… |
CVE-2020-16268 | High | 8.8 | 2020-12-29 | The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. Thi… |
CVE-2020-26282 | Critical | 10.0 | 2020-12-24 | BrowserUp Proxy allows you to manipulate HTTP requests and responses, capture HTTP content, and export performance data as a HAR file. BrowserUp Proxy works we… |
CVE-2020-35669 | Medium | 6.1 | 2020-12-24 | An issue was discovered in the http package through 0.12.2 for Dart. If the attacker controls the HTTP method and the app is using Request directly, it's possi… |
CVE-2020-35608 | High | 7.8 | 2020-12-22 | A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET… |
CVE-2020-27687 | High | 8.8 | 2020-12-18 | ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emai… |
CVE-2020-8177 | High | 7.8 | 2020-12-14 | curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J… |
CVE-2020-25967 | High | 8.8 | 2020-12-10 | The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability. |
CVE-2020-26260 | Medium | 6.4 | 2020-12-09 | BookStack is a platform for storing and organising information and documentation. In BookStack before version 0.30.5, a user with permissions to edit a page co… |
CVE-2020-29655 | High | 7.5 | 2020-12-09 | An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing Main_Login.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp… |
CVE-2020-14193 | Medium | 5.4 | 2020-11-30 | Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes &… |
CVE-2020-26238 | High | 7.9 | 2020-11-25 | Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In cron-utils before version 9.1.3, a templ… |
CVE-2020-13942 | Critical | 9.8 | 2020-11-24 | It is possible to inject malicious OGNL or MVEL scripts into the /context.json public endpoint. This was partially fixed in 1.5.1 but a new attack vector was f… |
CVE-2020-26081 | Medium | 6.1 | 2020-11-18 | Multiple vulnerabilities in the web UI of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to conduct cross-site scriptin… |
CVE-2020-26884 | Medium | 6.1 | 2020-11-18 | RSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability… |
CVE-2020-27627 | Medium | 6.1 | 2020-11-16 | JetBrains TeamCity before 2020.1.2 was vulnerable to URL injection. |
CVE-2020-26222 | High | 8.7 | 2020-11-13 | Dependabot is a set of packages for automated dependency management for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java, .NET, Elm and Go. In Dependabot-Core… |
CVE-2020-28031 | Medium | 4.3 | 2020-11-02 | eramba through c2.8.1 allows HTTP Host header injection with (for example) resultant wkhtml2pdf PDF printing by authenticated users. |
CVE-2020-15238 | High | 7.1 | 2020-10-27 | Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4, the DhcpClient method of the D-Bus interface to blueman-mechanism is prone to an argument injecti… |
CVE-2020-15244 | High | 8.0 | 2020-10-21 | In Magento (rubygems openmage/magento-lts package) before versions 19.4.8 and 20.0.4, an admin user can generate soap credentials that can be used to trigger R… |
CVE-2020-3561 | Medium | 4.7 | 2020-10-21 | A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could… |
CVE-2020-7749 | High | 7.6 | 2020-10-20 | This affects all versions of package osm-static-maps. User input given to the package is passed directly to a template without escaping ({{{ ... }}}). As such… |
CVE-2020-15255 | High | 8.7 | 2020-10-16 | In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as form… |
CVE-2020-15252 | High | 8.5 | 2020-10-16 | In XWiki before version 12.5 and 11.10.6, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context wh… |
CVE-2020-25768 | Medium | 5.3 | 2020-10-07 | Contao before 4.4.52, 4.9.x before 4.9.6, and 4.10.x before 4.10.1 have Improper Input Validation. It is possible to inject insert tags in front end forms whic… |
CVE-2020-15227 | High | 8.7 | 2020-10-01 | Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL th… |
CVE-2020-26137 | Medium | 6.5 | 2020-09-30 | urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the… |
CVE-2020-21523 | Critical | 9.8 | 2020-09-30 | A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function. The ftl file can be edited. This is the Freemarke… |
CVE-2020-26116 | High | 7.2 | 2020-09-27 | http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTT… |
CVE-2020-25596 | Medium | 5.5 | 2020-09-23 | An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various stat… |
CVE-2020-15187 | Low | 3.0 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, t… |
CVE-2020-15186 | Low | 3.4 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly. As a result, a malicious plugin author could use characters in a plugin name… |
CVE-2020-15185 | Low | 2.2 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compro… |
CVE-2020-15184 | Low | 3.7 | 2020-09-17 | In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the `alias` field on a `Chart.yaml` is not properly sanitized. This could lead to the injecti… |
CVE-2020-16875 | High | 8.4 | 2020-09-11 | <p>A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments.</p> <p>An attacker who successfull… |
CVE-2020-15171 | Medium | 6.6 | 2020-09-10 | In XWiki before versions 11.10.5 or 12.2.1, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context… |
CVE-2020-15164 | Critical | 10.0 | 2020-08-28 | in Scratch Login (MediaWiki extension) before version 1.1, any account can be logged into by using the same username with leading, trailing, or repeated unders… |
CVE-2020-12855 | High | 8.8 | 2020-08-26 | A Host header injection vulnerability has been discovered in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can poison this header resulting in an… |
CVE-2020-13863 | High | 8.1 | 2020-08-26 | The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improp… |
CVE-2020-24364 | High | 8.8 | 2020-08-24 | MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite. |
CVE-2020-15147 | High | 8.5 | 2020-08-21 | Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specific… |
CVE-2020-15140 | High | 8.2 | 2020-08-21 | In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted u… |
CVE-2020-15146 | Critical | 9.6 | 2020-08-20 | In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression evaluated by `symfony/expression-langu… |
CVE-2020-15143 | High | 7.7 | 2020-08-20 | In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, rrequest parameters injected inside an expression evaluated by `symfony/expression-lang… |
CVE-2020-15693 | Medium | 6.5 | 2020-08-14 | In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL. An injection is possible if the attacker controls any part… |
CVE-2020-16087 | High | 8.6 | 2020-08-13 | An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by… |
CVE-2020-17496 | Critical | 9.8 | 2020-08-12 | vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: thi… |
CVE-2020-16254 | Medium | 6.1 | 2020-08-05 | The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute). |
CVE-2017-18923 | High | 7.5 | 2020-07-29 | beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials. |
CVE-2020-7695 | Medium | 5.3 | 2020-07-27 | Uvicorn before 0.11.7 is vulnerable to HTTP response splitting. CRLF sequences are not escaped in the value of HTTP headers. Attackers can exploit this to add… |