CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 49)
Page 49 of 51 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-5245 | High | 7.9 | 2020-02-24 | Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by… |
CVE-2014-4678 | Critical | 9.8 | 2020-02-20 | The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted… |
CVE-2019-10795 | Medium | 6.3 | 2020-02-18 | undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a… |
CVE-2019-10794 | Medium | 6.3 | 2020-02-18 | All versions of component-flatten are vulnerable to Prototype Pollution. The a function could be tricked into adding or modifying properties of Object.prototyp… |
CVE-2019-10793 | Medium | 6.3 | 2020-02-18 | dot-object before 2.1.3 is vulnerable to Prototype Pollution. The set function could be tricked into adding or modifying properties of Object.prototype using a… |
CVE-2019-10792 | Medium | 6.3 | 2020-02-18 | bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using… |
CVE-2014-4967 | Critical | 9.8 | 2020-02-18 | Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed… |
CVE-2014-4966 | Critical | 9.8 | 2020-02-18 | Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows rem… |
CVE-2014-7236 | Critical | 9.1 | 2020-02-17 | Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins pa… |
CVE-2013-7324 | Medium | 5.3 | 2020-02-17 | Webkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote attackers to trigger unexpectedly high sound volume via malicious… |
CVE-2020-8800 | High | 8.8 | 2020-02-13 | SuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection. |
CVE-2013-7381 | Critical | 9.8 | 2020-02-12 | libnotify before 1.0.4 for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in a call to libnotify.notify. |
CVE-2013-2010 | Critical | 9.8 | 2020-02-12 | WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability |
CVE-2013-7378 | Critical | 9.8 | 2020-02-12 | scripts/email.coffee in the Hubot Scripts module before 2.4.4 for Node.js allows remote attackers to execute arbitrary commands. |
CVE-2014-5086 | High | 8.8 | 2020-02-10 | A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote… |
CVE-2014-5085 | High | 8.8 | 2020-02-10 | A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user ex… |
CVE-2014-5084 | High | 8.8 | 2020-02-10 | A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let a remote malicious user execute arbitra… |
CVE-2014-5083 | High | 8.8 | 2020-02-10 | A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious use… |
CVE-2010-4658 | Medium | 5.3 | 2020-02-07 | statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks. |
CVE-2013-3628 | High | 8.8 | 2020-02-07 | Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability |
CVE-2019-15616 | Medium | 4.3 | 2020-02-04 | Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long. |
CVE-2013-2678 | High | 8.1 | 2020-02-04 | Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or exe… |
CVE-2020-5230 | High | 7.7 | 2020-01-30 | Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for operation and security… |
CVE-2020-8093 | Medium | 5.3 | 2020-01-30 | A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable t… |
CVE-2013-3214 | Critical | 9.8 | 2020-01-28 | vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'. |
CVE-2013-3212 | High | 8.1 | 2020-01-28 | vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote attackers to view files and execute local s… |
CVE-2013-1437 | Critical | 9.8 | 2020-01-28 | Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version val… |
CVE-2015-3154 | Medium | 6.1 | 2020-01-27 | CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inj… |
CVE-2012-1496 | High | 8.8 | 2020-01-27 | Local file inclusion in WebCalendar before 1.2.5. |
CVE-2012-1495 | Critical | 9.8 | 2020-01-27 | install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter. |
CVE-2011-4558 | High | 7.2 | 2020-01-27 | Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and regex parameters. |
CVE-2014-4172 | Critical | 9.8 | 2020-01-24 | A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CA… |
CVE-2020-5219 | High | 8.7 | 2020-01-24 | Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compile(userControlledInput) where userControlledInp… |
CVE-2020-5217 | Medium | 4.4 | 2020-01-23 | In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input w… |
CVE-2020-5216 | Medium | 4.4 | 2020-01-23 | In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.9.0, 5.2.0, and 6.3.0. If user-supplied input w… |
CVE-2019-16468 | High | 7.5 | 2020-01-15 | Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensit… |
CVE-2012-0070 | High | 7.5 | 2020-01-15 | spamdyke prior to 4.2.1: STARTTLS reveals plaintext |
CVE-2014-7844 | High | 7.8 | 2020-01-14 | BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address. |
CVE-2013-7380 | Critical | 9.8 | 2020-01-10 | The Etherpad Lite ep_imageconvert Plugin has a Remote Command Injection Vulnerability |
CVE-2012-2931 | High | 7.2 | 2020-01-09 | PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file. |
CVE-2014-5287 | High | 8.8 | 2020-01-08 | A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface (WUI). |
CVE-2019-20213 | High | 7.5 | 2020-01-02 | D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php. |
CVE-2013-7070 | Critical | 9.8 | 2019-12-31 | The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in th… |
CVE-2019-17558 | High | 7.5 | 2019-12-30 | Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided throug… |
CVE-2019-19389 | Medium | 5.4 | 2019-12-26 | JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting. |
CVE-2013-4318 | Medium | 5.4 | 2019-12-26 | File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory. |
CVE-2019-6034 | Medium | 6.1 | 2019-12-26 | a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the contex… |
CVE-2019-11045 | Low | 3.7 | 2019-12-23 | In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as termin… |
CVE-2019-8792 | High | 8.8 | 2019-12-18 | An injection issue was addressed with improved validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing… |
CVE-2019-17123 | High | 7.5 | 2019-12-13 | The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are mishandled, as demonstrated by fro… |
CVE-2019-1490 | Medium | 5.4 | 2019-12-10 | A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business Server Spoofin… |
CVE-2013-2095 | Critical | 9.8 | 2019-12-10 | rubygem-openshift-origin-controller: API can be used to create applications via cartridge_cache.rb URI.prase() to perform command injection |
CVE-2019-16771 | Medium | 4.8 | 2019-12-06 | Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject arbitrary HTTP heade… |
CVE-2013-4486 | Critical | 9.8 | 2019-12-03 | Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging |
CVE-2011-2717 | Critical | 9.8 | 2019-11-27 | The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters i… |
CVE-2019-19330 | Critical | 9.8 | 2019-11-27 | The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the z… |
CVE-2019-16254 | Medium | 5.3 | 2019-11-26 | Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the re… |
CVE-2011-3624 | Medium | 5.3 | 2019-11-26 | Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server header… |
CVE-2019-4216 | Medium | 4.6 | 2019-11-22 | IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass… |
CVE-2014-3700 | Critical | 9.8 | 2019-11-21 | eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data |
CVE-2010-4654 | High | 7.8 | 2019-11-13 | poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack. |
CVE-2019-8135 | Critical | 9.8 | 2019-11-06 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Dependency injection through Symphony fram… |
CVE-2010-3668 | High | 7.5 | 2019-11-04 | TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl. |
CVE-2005-3056 | Critical | 9.8 | 2019-11-01 | TWiki allows arbitrary shell command execution via the Include function |
CVE-2019-18657 | Medium | 5.3 | 2019-10-31 | ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function. |
CVE-2011-2538 | High | 7.2 | 2019-10-29 | Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitr… |
CVE-2019-4461 | Medium | 5.4 | 2019-10-25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by improper caching of content. This would a… |
CVE-2019-4396 | Medium | 5.4 | 2019-10-25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supp… |
CVE-2019-18348 | Medium | 6.1 | 2019-10-23 | An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a u… |
CVE-2019-11282 | Medium | 4.3 | 2019-10-23 | Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malicious user with scim… |
CVE-2019-17513 | High | 7.5 | 2019-10-18 | An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP c… |
CVE-2019-9535 | Critical | 9.8 | 2019-10-09 | A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malic… |
CVE-2019-4558 | High | 7.8 | 2019-10-09 | A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17 th… |
CVE-2019-15259 | Medium | 6.1 | 2019-10-02 | A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting a… |
CVE-2019-17068 | High | 7.5 | 2019-10-01 | PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content. |
CVE-2019-11275 | Medium | 4.3 | 2019-10-01 | Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior… |
CVE-2019-16532 | Medium | 6.1 | 2019-09-26 | An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections. |
CVE-2019-11277 | High | 8.1 | 2019-09-23 | Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malic… |
CVE-2017-18634 | Critical | 9.8 | 2019-09-16 | The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php. |
CVE-2019-5314 | Medium | 6.1 | 2019-09-13 | Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. An attacker would be able to accompli… |
CVE-2019-5977 | Medium | 4.3 | 2019-09-12 | Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mai… |
CVE-2019-10074 | Critical | 9.8 | 2019-09-11 | An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been disabled on such a field. This was the ca… |
CVE-2017-18605 | Critical | 9.8 | 2019-09-10 | The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection. |
CVE-2017-18604 | High | 7.5 | 2019-09-10 | The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request. |
CVE-2019-12463 | High | 8.8 | 2019-09-09 | An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options (includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.p… |
CVE-2019-10665 | Critical | 9.8 | 2019-09-09 | An issue was discovered in LibreNMS through 1.47. The scripts that handle the graphing options (html/includes/graphs/common.inc.php and html/includes/graphs/gr… |
CVE-2019-1939 | High | 8.8 | 2019-09-05 | A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system… |
CVE-2014-10386 | Medium | 6.1 | 2019-08-22 | The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections. |
CVE-2014-10394 | Medium | 6.1 | 2019-08-22 | The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header. |
CVE-2014-10391 | Medium | 6.1 | 2019-08-22 | The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection. |
CVE-2017-18583 | Critical | 9.8 | 2019-08-22 | The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection. |
CVE-2019-11581 | Critical | 9.8 | 2019-08-09 | There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker… |
CVE-2019-5404 | High | 8.8 | 2019-08-09 | A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. |
CVE-2016-10801 | High | 8.8 | 2019-08-07 | cPanel before 58.0.4 has improper session handling for shared users (SEC-139). |
CVE-2019-7889 | Medium | 6.5 | 2019-08-02 | An injection vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 pri… |
CVE-2017-18437 | Medium | 4.4 | 2019-08-02 | cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240). |
CVE-2017-18389 | Medium | 6.3 | 2019-08-02 | cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318). |
CVE-2017-18387 | High | 7.2 | 2019-08-02 | cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314). |
CVE-2017-18386 | High | 7.2 | 2019-08-02 | cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313). |
CVE-2016-10847 | High | 8.1 | 2019-08-01 | cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80). |