cve.bz

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection), page 110

Filter

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

What the weakness is: CWE-74 at MITRE

Ask an AI about CWE-74

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/74.html and https://cve.bz/cve/cwe/74?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.1CVE-2013-2678ExploitEPSS 17%

    Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script usi…

  2. 7.5CVE-2020-5230EPSS 1.2%

    Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for operation and security since such identifiers are sometimes used for file system operations which may l…

  3. 7.8CVE-2020-8093EPSS 0.4%

    A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable to cause third-party code execution

  4. 9.8CVE-2013-3214ExploitEPSS 85%

    vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.

  5. 8.1CVE-2013-3212ExploitEPSS 7.5%

    vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote attackers to view files and execute local script code.

  6. 9.8CVE-2013-1437EPSS 2.9%

    Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value.

  7. 6.1CVE-2015-3154EPSS 1.0%

    CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF …

  8. 8.8CVE-2012-1496ExploitEPSS 2.5%

    Local file inclusion in WebCalendar before 1.2.5.

  9. 9.8CVE-2012-1495ExploitEPSS 80%

    install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.

  10. 7.2CVE-2011-4558ExploitEPSS 4.3%

    Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and regex parameters.

  11. 9.8CVE-2014-4172EPSS 6.1%

    A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to in…

  12. 8.8CVE-2020-5219EPSS 2.4%

    Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compile(userControlledInput) where userControlledInput is text that comes from user input. If running angular-expressions in the bro…

  13. 5.8CVE-2020-5217EPSS 1.8%

    In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/override_content_security_policy_directives, a semicolon c…

  14. 5.8CVE-2020-5216EPSS 1.2%

    In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.9.0, 5.2.0, and 6.3.0. If user-supplied input was passed into append/override_content_security_policy_directives, a newline cou…

  15. 7.5CVE-2019-16468EPSS 2.6%

    Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability. Successful exploitation could lead to sensitive information disclosure.

  16. 7.5CVE-2012-0070EPSS 0.9%

    spamdyke prior to 4.2.1: STARTTLS reveals plaintext

  17. 7.8CVE-2014-7844EPSS 1.6%

    BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

  18. 9.8CVE-2013-7380EPSS 2.2%

    The Etherpad Lite ep_imageconvert Plugin has a Remote Command Injection Vulnerability

  19. 7.2CVE-2012-2931EPSS 1.4%

    PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.

  20. 8.8CVE-2014-5287ExploitEPSS 8.0%

    A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface (WUI).

  21. 7.5CVE-2019-20213EPSS 2.2%

    D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.

  22. 9.8CVE-2013-7070EPSS 4.1%

    The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI.

  23. 7.5CVE-2019-17558KEVExploitEPSS 99%

    Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A u…

  24. 5.4CVE-2019-19389EPSS 0.8%

    JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting.

  25. 5.4CVE-2013-4318EPSS 0.8%

    File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory.

  26. 6.1CVE-2019-6034EPSS 0.7%

    a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application due to unspecified vectors.

  27. 5.9CVE-2019-11045EPSS 8.8%

    In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applica…

  28. 8.8CVE-2019-8792EPSS 1.9%

    An injection issue was addressed with improved validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

  29. 7.5CVE-2019-17123EPSS 1.0%

    The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are mishandled, as demonstrated by fromName header injection with a %0a or %0d character. (Also, the message parameter…

  30. 5.4CVE-2019-1490EPSS 1.5%

    A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business Server Spoofing Vulnerability'.

  31. 9.8CVE-2013-2095EPSS 2.5%

    rubygem-openshift-origin-controller: API can be used to create applications via cartridge_cache.rb URI.prase() to perform command injection

  32. 6.5CVE-2019-16771EPSS 1.0%

    Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject arbitrary HTTP headers via CRLF sequences when unsanitized data is used to populate the headers of a…

  33. 9.8CVE-2013-4486EPSS 1.5%

    Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging

  34. 9.8CVE-2011-2717EPSS 3.9%

    The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message.

  35. 9.8CVE-2019-19330EPSS 4.0%

    The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.

  36. 5.3CVE-2019-16254EPSS 4.6%

    Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header, an attacker can exploit it to insert a newline character to split…

  37. 5.3CVE-2011-3624EPSS 1.5%

    Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers in requests, which might allow remote attackers to inject arbitrary text into …

  38. 4.6CVE-2019-4216EPSS 0.6%

    IBM SmartCloud Analytics 1.3.1 through 1.3.5 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM X-Force ID: 159187.

  39. 9.8CVE-2014-3700EPSS 2.8%

    eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data

  40. 7.8CVE-2010-4654EPSS 1.2%

    poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.

  41. 9.8CVE-2019-8135EPSS 2.5%

    A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Dependency injection through Symphony framework allows service identifiers to be derived from user controlled data, which …

  42. 7.5CVE-2010-3668EPSS 1.3%

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl.

  43. 9.8CVE-2005-3056EPSS 3.5%

    TWiki allows arbitrary shell command execution via the Include function

  44. 5.3CVE-2019-18657EPSS 1.5%

    ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function.

  45. 7.2CVE-2011-2538EPSS 2.6%

    Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands.

  46. 5.4CVE-2019-4461EPSS 0.6%

    IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by improper caching of content. This would allow the attacker to perform further attacks, such as Web Cache poisoning, cross…

  47. 5.4CVE-2019-4396EPSS 0.7%

    IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitra…

  48. 6.1CVE-2019-18348EPSS 3.5%

    An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen wi…

  49. 4.3CVE-2019-11282EPSS 1.1%

    Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malicious user with scim.invite scope can craft a request with malicious content which can leak informat…

  50. 7.5CVE-2019-17513EPSS 2.2%

    An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers wit…