CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 53)
Page 53 of 55 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-8093 | Medium | 5.3 | 2020-01-30 | A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable t… |
CVE-2013-3214 | Critical | 9.8 | 2020-01-28 | vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'. |
CVE-2013-3212 | High | 8.1 | 2020-01-28 | vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote attackers to view files and execute local s… |
CVE-2013-1437 | Critical | 9.8 | 2020-01-28 | Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version val… |
CVE-2015-3154 | Medium | 6.1 | 2020-01-27 | CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inj… |
CVE-2012-1496 | High | 8.8 | 2020-01-27 | Local file inclusion in WebCalendar before 1.2.5. |
CVE-2012-1495 | Critical | 9.8 | 2020-01-27 | install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter. |
CVE-2011-4558 | High | 7.2 | 2020-01-27 | Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and regex parameters. |
CVE-2014-4172 | Critical | 9.8 | 2020-01-24 | A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CA… |
CVE-2020-5219 | High | 8.7 | 2020-01-24 | Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compile(userControlledInput) where userControlledInp… |
CVE-2020-5217 | Medium | 4.4 | 2020-01-23 | In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input w… |
CVE-2020-5216 | Medium | 4.4 | 2020-01-23 | In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.9.0, 5.2.0, and 6.3.0. If user-supplied input w… |
CVE-2019-16468 | High | 7.5 | 2020-01-15 | Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensit… |
CVE-2012-0070 | High | 7.5 | 2020-01-15 | spamdyke prior to 4.2.1: STARTTLS reveals plaintext |
CVE-2014-7844 | High | 7.8 | 2020-01-14 | BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address. |
CVE-2013-7380 | Critical | 9.8 | 2020-01-10 | The Etherpad Lite ep_imageconvert Plugin has a Remote Command Injection Vulnerability |
CVE-2012-2931 | High | 7.2 | 2020-01-09 | PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file. |
CVE-2014-5287 | High | 8.8 | 2020-01-08 | A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface (WUI). |
CVE-2019-20213 | High | 7.5 | 2020-01-02 | D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php. |
CVE-2013-7070 | Critical | 9.8 | 2019-12-31 | The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in th… |
CVE-2019-17558 | High | 7.5 | 2019-12-30 | Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided throug… |
CVE-2019-19389 | Medium | 5.4 | 2019-12-26 | JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting. |
CVE-2013-4318 | Medium | 5.4 | 2019-12-26 | File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory. |
CVE-2019-6034 | Medium | 6.1 | 2019-12-26 | a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the contex… |
CVE-2019-11045 | Low | 3.7 | 2019-12-23 | In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as termin… |
CVE-2019-8792 | High | 8.8 | 2019-12-18 | An injection issue was addressed with improved validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing… |
CVE-2019-17123 | High | 7.5 | 2019-12-13 | The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are mishandled, as demonstrated by fro… |
CVE-2019-1490 | Medium | 5.4 | 2019-12-10 | A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business Server Spoofin… |
CVE-2013-2095 | Critical | 9.8 | 2019-12-10 | rubygem-openshift-origin-controller: API can be used to create applications via cartridge_cache.rb URI.prase() to perform command injection |
CVE-2019-16771 | Medium | 4.8 | 2019-12-06 | Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject arbitrary HTTP heade… |
CVE-2013-4486 | Critical | 9.8 | 2019-12-03 | Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging |
CVE-2011-2717 | Critical | 9.8 | 2019-11-27 | The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters i… |
CVE-2019-19330 | Critical | 9.8 | 2019-11-27 | The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the z… |
CVE-2019-16254 | Medium | 5.3 | 2019-11-26 | Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the re… |
CVE-2011-3624 | Medium | 5.3 | 2019-11-26 | Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server header… |
CVE-2019-4216 | Medium | 4.6 | 2019-11-22 | IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass… |
CVE-2014-3700 | Critical | 9.8 | 2019-11-21 | eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data |
CVE-2010-4654 | High | 7.8 | 2019-11-13 | poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack. |
CVE-2019-8135 | Critical | 9.8 | 2019-11-06 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Dependency injection through Symphony fram… |
CVE-2010-3668 | High | 7.5 | 2019-11-04 | TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl. |
CVE-2005-3056 | Critical | 9.8 | 2019-11-01 | TWiki allows arbitrary shell command execution via the Include function |
CVE-2019-18657 | Medium | 5.3 | 2019-10-31 | ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function. |
CVE-2011-2538 | High | 7.2 | 2019-10-29 | Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitr… |
CVE-2019-4461 | Medium | 5.4 | 2019-10-25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by improper caching of content. This would a… |
CVE-2019-4396 | Medium | 5.4 | 2019-10-25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supp… |
CVE-2019-18348 | Medium | 6.1 | 2019-10-23 | An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a u… |
CVE-2019-11282 | Medium | 4.3 | 2019-10-23 | Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malicious user with scim… |
CVE-2019-17513 | High | 7.5 | 2019-10-18 | An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP c… |
CVE-2019-9535 | Critical | 9.8 | 2019-10-09 | A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malic… |
CVE-2019-4558 | High | 7.8 | 2019-10-09 | A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17 th… |
CVE-2019-15259 | Medium | 6.1 | 2019-10-02 | A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting a… |
CVE-2019-17068 | High | 7.5 | 2019-10-01 | PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content. |
CVE-2019-11275 | Medium | 4.3 | 2019-10-01 | Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior… |
CVE-2019-16532 | Medium | 6.1 | 2019-09-26 | An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections. |
CVE-2019-11277 | High | 8.1 | 2019-09-23 | Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malic… |
CVE-2017-18634 | Critical | 9.8 | 2019-09-16 | The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php. |
CVE-2019-5314 | Medium | 6.1 | 2019-09-13 | Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. An attacker would be able to accompli… |
CVE-2019-5977 | Medium | 4.3 | 2019-09-12 | Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mai… |
CVE-2019-10074 | Critical | 9.8 | 2019-09-11 | An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been disabled on such a field. This was the ca… |
CVE-2017-18605 | Critical | 9.8 | 2019-09-10 | The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection. |
CVE-2017-18604 | High | 7.5 | 2019-09-10 | The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request. |
CVE-2019-12463 | High | 8.8 | 2019-09-09 | An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options (includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.p… |
CVE-2019-10665 | Critical | 9.8 | 2019-09-09 | An issue was discovered in LibreNMS through 1.47. The scripts that handle the graphing options (html/includes/graphs/common.inc.php and html/includes/graphs/gr… |
CVE-2019-1939 | High | 8.8 | 2019-09-05 | A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system… |
CVE-2014-10386 | Medium | 6.1 | 2019-08-22 | The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections. |
CVE-2014-10394 | Medium | 6.1 | 2019-08-22 | The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header. |
CVE-2014-10391 | Medium | 6.1 | 2019-08-22 | The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection. |
CVE-2017-18583 | Critical | 9.8 | 2019-08-22 | The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection. |
CVE-2019-11581 | Critical | 9.8 | 2019-08-09 | There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker… |
CVE-2019-5404 | High | 8.8 | 2019-08-09 | A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. |
CVE-2016-10801 | High | 8.8 | 2019-08-07 | cPanel before 58.0.4 has improper session handling for shared users (SEC-139). |
CVE-2019-7889 | Medium | 6.5 | 2019-08-02 | An injection vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 pri… |
CVE-2017-18437 | Medium | 4.4 | 2019-08-02 | cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240). |
CVE-2017-18389 | Medium | 6.3 | 2019-08-02 | cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318). |
CVE-2017-18387 | High | 7.2 | 2019-08-02 | cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314). |
CVE-2017-18386 | High | 7.2 | 2019-08-02 | cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313). |
CVE-2016-10847 | High | 8.1 | 2019-08-01 | cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80). |
CVE-2016-10845 | High | 8.1 | 2019-08-01 | cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78). |
CVE-2018-20914 | High | 7.3 | 2019-08-01 | In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368). |
CVE-2018-20898 | Medium | 4.3 | 2019-08-01 | cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396). |
CVE-2018-20885 | Medium | 5.3 | 2019-08-01 | cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416). |
CVE-2019-1020006 | Medium | 6.1 | 2019-07-29 | invenio-app before 1.1.1 allows host header injection. |
CVE-2019-9811 | High | 8.3 | 2019-07-23 | As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that… |
CVE-2019-11718 | Medium | 5.3 | 2019-07-23 | Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without saniti… |
CVE-2019-13915 | High | 7.5 | 2019-07-18 | b3log Wide before 1.6.0 allows three types of attacks to access arbitrary files. First, the attacker can write code in the editor, and compile and run it appro… |
CVE-2019-1010310 | Low | 3.5 | 2019-07-12 | GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description. The impact is: Ad… |
CVE-2019-0319 | High | 7.5 | 2019-07-10 | The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could… |
CVE-2019-13146 | Medium | 5.3 | 2019-07-09 | The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value from a certain set of inputs can be made to return an… |
CVE-2016-10761 | Medium | 6.5 | 2019-06-29 | Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack. |
CVE-2019-12966 | Critical | 9.8 | 2019-06-26 | FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the {"a":(function(){confirm(1)})()} input. |
CVE-2019-8323 | High | 7.5 | 2019-06-17 | An issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_response may output the API response to stdout as it is. Therefor… |
CVE-2019-8322 | High | 7.5 | 2019-06-17 | An issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the contents of the API response directly to stdout. Therefore… |
CVE-2019-8325 | High | 7.5 | 2019-06-17 | An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls alert_error without escaping, escape sequence injection is… |
CVE-2019-0304 | Critical | 9.8 | 2019-06-12 | FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EX… |
CVE-2019-12387 | Medium | 6.1 | 2019-06-10 | In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF. |
CVE-2019-12303 | High | 8.8 | 2019-06-06 | In Rancher 2 through 2.2.3, Project owners can inject additional fluentd configuration to read files or execute arbitrary commands inside the fluentd container. |
CVE-2019-6800 | High | 7.5 | 2019-06-05 | In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over HTTP, including scripts which are subse… |
CVE-2016-8900 | Critical | 9.8 | 2019-05-24 | Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to change_tags. |
CVE-2016-8899 | Critical | 9.8 | 2019-05-23 | Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to change_cats. |
CVE-2016-8901 | Critical | 9.8 | 2019-05-23 | b2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php. |