CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 51)
Page 51 of 51 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-17529 | High | 8.8 | 2017-12-14 | af/util/xp/ut_go_file.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might… |
CVE-2017-17528 | High | 8.8 | 2017-12-14 | backends/platform/sdl/posix/posix.cpp in ScummVM 1.9.0 does not validate strings before launching the program specified by the BROWSER environment variable, wh… |
CVE-2017-17527 | High | 8.8 | 2017-12-14 | delphi_gui/WWWBrowserRunnerDM.pas in PasDoc 0.14 does not validate strings before launching the program specified by the BROWSER environment variable, which mi… |
CVE-2017-17526 | High | 8.8 | 2017-12-14 | Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSER environment variable, which might all… |
CVE-2017-17525 | High | 8.8 | 2017-12-14 | guiclient/guiclient.cpp in xTuple PostBooks 4.7.0 does not validate strings before launching the program specified by the BROWSER environment variable, which m… |
CVE-2017-17524 | High | 8.8 | 2017-12-14 | library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might al… |
CVE-2017-17522 | High | 8.8 | 2017-12-14 | Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might all… |
CVE-2017-17521 | High | 8.8 | 2017-12-14 | uiutil.c in FontForge through 20170731 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow… |
CVE-2017-17520 | High | 8.8 | 2017-12-14 | tools/url_handler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remot… |
CVE-2017-17519 | High | 8.8 | 2017-12-14 | batteriesConfig.mlp in OCaml Batteries Included (aka ocaml-batteries) 2.6 does not validate strings before launching the program specified by the BROWSER envir… |
CVE-2017-17518 | High | 8.8 | 2017-12-14 | swt/motif/browser.c in White_dune (aka whitedune) 0.30.10 does not validate strings before launching the program specified by the BROWSER environment variable… |
CVE-2017-17517 | High | 8.8 | 2017-12-14 | libsylph/utils.c in Sylpheed through 3.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allo… |
CVE-2017-17516 | High | 8.8 | 2017-12-14 | scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the program specified by the BROWSER environmen… |
CVE-2017-17515 | High | 8.8 | 2017-12-14 | etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote… |
CVE-2017-17514 | High | 8.8 | 2017-12-14 | boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers… |
CVE-2017-17513 | High | 8.8 | 2017-12-14 | TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attack… |
CVE-2017-17511 | High | 8.8 | 2017-12-14 | KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to co… |
CVE-2017-16680 | High | 7.5 | 2017-12-12 | Two potential audit log injections in SAP HANA extended application services 1.0, advanced model: 1) Certain HTTP/REST endpoints of controller service are miss… |
CVE-2017-15708 | Critical | 9.8 | 2017-12-11 | In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2… |
CVE-2017-17523 | High | 8.8 | 2017-12-11 | lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows r… |
CVE-2017-17512 | High | 8.8 | 2017-12-11 | sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which al… |
CVE-2017-1000217 | High | 8.8 | 2017-11-17 | Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code exe… |
CVE-2017-16719 | High | 7.5 | 2017-11-16 | An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3… |
CVE-2017-8809 | Critical | 9.8 | 2017-11-15 | api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability. |
CVE-2017-5636 | Critical | 9.8 | 2017-10-19 | In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack w… |
CVE-2015-5227 | High | 8.8 | 2017-10-18 | The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter. |
CVE-2015-7544 | Critical | 9.1 | 2017-09-25 | redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows remote authenticated users with the SuperUser role… |
CVE-2015-4075 | High | 8.1 | 2017-09-20 | The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted language.save task. |
CVE-2017-14397 | Critical | 9.8 | 2017-09-12 | AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability. |
CVE-2016-2980 | Medium | 6.3 | 2017-08-29 | The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a vulnerability in th… |
CVE-2017-9861 | Critical | 9.8 | 2017-08-05 | An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication with encryption: it is vulnerable to repl… |
CVE-2017-6748 | Medium | 6.7 | 2017-07-25 | A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and eleva… |
CVE-2017-5246 | Medium | 4.3 | 2017-07-18 | Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated user can populate this field with a val… |
CVE-2017-1000052 | High | 7.8 | 2017-07-17 | Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass filetyp… |
CVE-2017-7459 | High | 7.5 | 2017-06-26 | ntopng before 3.0 allows HTTP Response Splitting. |
CVE-2017-9135 | High | 8.8 | 2017-05-21 | An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4. On the backend of the device's web interface, there are s… |
CVE-2017-9133 | High | 8.8 | 2017-05-21 | An issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. In the device's web interface, after logging in, there is… |
CVE-2017-6031 | High | 8.8 | 2017-05-06 | A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax"… |
CVE-2017-8458 | Medium | 6.5 | 2017-05-03 | Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displayed without a clear UI indication that… |
CVE-2017-2140 | High | 8.8 | 2017-04-28 | Tablacus Explorer 17.3.30 and earlier allows arbitrary scripts to be executed in the context of the application due to specially crafted directory. |
CVE-2017-3547 | High | 7.4 | 2017-04-24 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). Supported versions that… |
CVE-2016-8720 | Medium | 4.3 | 2017-04-13 | An exploitable HTTP Header Injection vulnerability exists in the Web Application functionality of the Moxa AWK-3131A Wireless Access Point running firmware 1.1… |
CVE-2016-1155 | Critical | 9.8 | 2017-04-13 | HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitr… |
CVE-2017-7703 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed… |
CVE-2017-7239 | Critical | 9.8 | 2017-04-10 | Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service (proc… |
CVE-2015-8258 | High | 7.5 | 2017-04-10 | AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, ak… |
CVE-2015-7264 | Critical | 9.8 | 2017-04-10 | The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks. |
CVE-2017-6971 | High | 8.8 | 2017-03-22 | AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch… |
CVE-2017-0154 | Medium | 4.4 | 2017-03-17 | Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access infor… |
CVE-2017-5585 | High | 8.8 | 2017-02-22 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config optio… |
CVE-2017-5630 | High | 7.5 | 2017-02-01 | PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remot… |
CVE-2015-2180 | High | 8.8 | 2017-01-30 | The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the passwo… |
CVE-2016-4010 | Critical | 9.8 | 2017-01-23 | Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shoppin… |
CVE-2016-5013 | Medium | 5.4 | 2017-01-20 | In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam. |
CVE-2016-10131 | Critical | 9.8 | 2017-01-12 | system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the email->from field to in… |
CVE-2016-6473 | Medium | 6.5 | 2016-12-14 | A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network s… |
CVE-2016-9832 | Critical | 9.9 | 2016-12-10 | PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code… |
CVE-2016-5685 | High | 8.8 | 2016-11-29 | Dell iDRAC7 and iDRAC8 devices with firmware before 2.40.40.40 allow authenticated users to gain Bash shell access through a string injection. |
CVE-2016-6754 | High | 8.8 | 2016-11-25 | A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to… |
CVE-2016-7125 | High | 7.5 | 2016-09-12 | ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote atta… |
CVE-2016-5701 | Medium | 6.1 | 2016-07-03 | setup/frames/index.inc.php in phpMyAdmin 4.0.10.x before 4.0.10.16, 4.4.15.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to conduct BBCode… |
CVE-2015-8800 | High | 7.3 | 2016-06-08 | Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Device… |
CVE-2016-2204 | High | 8.2 | 2016-04-22 | The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-… |
CVE-2016-0881 | Medium | 6.5 | 2016-02-12 | EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks a… |
CVE-2015-7466 | Low | 3.1 | 2016-01-10 | Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to conduct LDAP inject… |
CVE-2015-7309 | | 2015-09-22 | The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code… | |
CVE-2015-5841 | | 2015-09-18 | The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to an HTTP CONNECT request, which allows r… | |
CVE-2015-3253 | Critical | 9.8 | 2015-08-13 | The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial… |
CVE-2014-8910 | | 2015-07-20 | IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrar… | |
CVE-2015-1762 | | 2015-07-14 | Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does not prevent use of u… | |
CVE-2015-0116 | | 2015-06-28 | IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1… | |
CVE-2015-3205 | | 2015-06-16 | libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to "free" function calls in the… | |
CVE-2015-3200 | High | 7.5 | 2015-06-09 | mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as… |
CVE-2015-0169 | | 2015-05-25 | IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arguments via un… | |
CVE-2015-2704 | | 2015-05-18 | realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf via a newline character in an LDAP response. | |
CVE-2015-3013 | | 2015-05-08 | ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files… | |
CVE-2013-6501 | | 2015-03-30 | The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it… | |
CVE-2015-1592 | | 2015-02-19 | Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which… | |
CVE-2015-0931 | | 2015-02-14 | Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to execute arb… | |
CVE-2015-1169 | | 2015-02-10 | Apereo Central Authentication Service (CAS) Server before 3.5.3 allows remote attackers to conduct LDAP injection attacks via a crafted username, as demonstrat… | |
CVE-2014-7287 | | 2015-02-01 | The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended c… | |
CVE-2013-6435 | | 2014-12-16 | Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to t… | |
CVE-2014-8423 | | 2014-11-28 | Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors. | |
CVE-2013-2251 | Critical | 9.8 | 2013-07-20 | Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or… |
CVE-2012-4196 | | 2012-10-29 | Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 all… | |
CVE-2011-2855 | | 2011-09-19 | Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of ser… | |
CVE-2011-2805 | | 2011-08-03 | Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks via unspecified vectors. | |
CVE-2009-1781 | | 2009-05-22 | Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to inject arbitrary PHP code into phpre_confi… | |
CVE-2008-0456 | | 2008-01-25 | CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x ser… | |
CVE-2007-4190 | | 2007-08-08 | CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response… | |
CVE-2005-3750 | | 2005-11-22 | Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters (backticks) in a URL that another produc… | |
CVE-2005-3007 | | 2005-09-21 | Opera before 8.50 allows remote attackers to spoof the content type of files via a filename with a trailing "." (dot), which might allow remote attackers to tr… | |
CVE-2004-1157 | | 2005-01-10 | Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target wind… | |
CVE-2004-2570 | | 2004-12-31 | Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary files from the clien… |