cve.bz

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection), page 111

Filter

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

What the weakness is: CWE-74 at MITRE

Ask an AI about CWE-74

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/74.html and https://cve.bz/cve/cwe/74?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2019-9535EPSS 2.5%

    A vulnerability exists in the way that iTerm2 integrates with tmux's control mode, which may allow an attacker to execute arbitrary commands by providing malicious output to the terminal. This affects versions of iTerm2 up to and including…

  2. 7.8CVE-2019-4558EPSS 1.2%

    A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17 that could allow a local attacker to obtain root privilege by injecting parameters…

  3. 6.1CVE-2019-15259EPSS 1.1%

    A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. The vulnerability is due to insufficient input validation of some paramet…

  4. 7.5CVE-2019-17068EPSS 1.8%

    PuTTY before 0.73 mishandles the "bracketed paste mode" protection mechanism, which may allow a session to be affected by malicious clipboard content.

  5. 4.3CVE-2019-11275EPSS 1.1%

    Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior to 669.0.13, and versions 670.0.x prior to 670.0.7, contain a vulnerability whe…

  6. 6.1CVE-2019-16532EPSS 1.2%

    An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections.

  7. 8.1CVE-2019-11277EPSS 1.7%

    Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance cr…

  8. 9.8CVE-2017-18634EPSS 2.2%

    The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php.

  9. 6.1CVE-2019-5314EPSS 0.6%

    Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability.

  10. 4.3CVE-2019-5977EPSS 1.1%

    Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'.

  11. 9.8CVE-2019-10074EPSS 3.4%

    An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been disabled on such a field. This was the case for the Customer Request "story" input in the Order Manager application. Enco…

  12. 9.8CVE-2017-18605EPSS 2.3%

    The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection.

  13. 7.5CVE-2017-18604EPSS 1.6%

    The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request.

  14. 8.8CVE-2019-12463EPSS 1.4%

    An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options (includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.php) do not sufficiently validate or encode several fields of user supplied input…

  15. 9.8CVE-2019-10665EPSS 1.5%

    An issue was discovered in LibreNMS through 1.47. The scripts that handle the graphing options (html/includes/graphs/common.inc.php and html/includes/graphs/graphs.inc.php) do not sufficiently validate or encode several fields of user supp…

  16. 8.8CVE-2019-1939EPSS 4.3%

    A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging feature…

  17. 6.1CVE-2014-10386EPSS 0.9%

    The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections.

  18. 6.1CVE-2014-10394EPSS 0.9%

    The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header.

  19. 6.1CVE-2014-10391EPSS 0.9%

    The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.

  20. 9.8CVE-2017-18583EPSS 2.1%

    The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection.

  21. 9.8CVE-2019-11581KEVExploitEPSS 85%

    There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Ji…

  22. 8.8CVE-2019-5404EPSS 1.6%

    A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1.

  23. 8.8CVE-2016-10801EPSS 1.1%

    cPanel before 58.0.4 has improper session handling for shared users (SEC-139).

  24. 6.5CVE-2019-7889EPSS 0.8%

    An injection vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with marketing ma…

  25. 4.4CVE-2017-18437EPSS 0.5%

    cPanel before 64.0.21 allows a Webmail account to execute code via forwarders (SEC-240).

  26. 6.3CVE-2017-18389EPSS 0.7%

    cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).

  27. 7.2CVE-2017-18387EPSS 2.0%

    cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in a Reseller style upload (SEC-314).

  28. 7.2CVE-2017-18386EPSS 2.0%

    cPanel before 68.0.15 allows arbitrary code execution via Maketext injection in PostgresAdmin (SEC-313).

  29. 8.1CVE-2016-10847EPSS 1.1%

    cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80).

  30. 8.1CVE-2016-10845EPSS 1.1%

    cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78).

  31. 7.3CVE-2018-20914EPSS 0.8%

    In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).

  32. 4.3CVE-2018-20898EPSS 0.6%

    cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396).

  33. 5.3CVE-2018-20885EPSS 0.8%

    cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416).

  34. 6.1CVE-2019-1020006EPSS 0.9%

    invenio-app before 1.1.1 allows host header injection.

  35. 8.3CVE-2019-9811EPSS 2.6%

    As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR < 60.8,…

  36. 5.3CVE-2019-11718EPSS 1.2%

    Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Ac…

  37. 7.5CVE-2019-13915EPSS 2.6%

    b3log Wide before 1.6.0 allows three types of attacks to access arbitrary files. First, the attacker can write code in the editor, and compile and run it approximately three times to read an arbitrary file. Second, the attacker can create …

  38. 3.5CVE-2019-1010310EPSS 0.7%

    GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description. The impact is: Admins can phish any user or group of users for credentials / credit cards. The co…

  39. 7.5CVE-2019-0319EPSS 2.5%

    The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service w…

  40. 5.3CVE-2019-13146EPSS 1.4%

    The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value from a certain set of inputs can be made to return any input, which can be dangerous depending on how applications use it. If an appl…

  41. 6.5CVE-2016-10761EPSS 0.7%

    Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack.

  42. 9.8CVE-2019-12966EPSS 2.4%

    FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the {"a":(function(){confirm(1)})()} input.

  43. 7.5CVE-2019-8323EPSS 3.3%

    An issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_response may output the API response to stdout as it is. Therefore, if the API side modifies the response, escape sequence injection may occur.

  44. 7.5CVE-2019-8322EPSS 3.3%

    An issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the contents of the API response directly to stdout. Therefore, if the response is crafted, escape sequence injection may occur.

  45. 7.5CVE-2019-8325EPSS 3.3%

    An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls alert_error without escaping, escape sequence injection is possible. (There are many ways to cause an error.)

  46. 9.8CVE-2019-0304EPSS 1.6%

    FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNE…

  47. 6.1CVE-2019-12387EPSS 2.5%

    In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

  48. 8.8CVE-2019-12303EPSS 2.0%

    In Rancher 2 through 2.2.3, Project owners can inject additional fluentd configuration to read files or execute arbitrary commands inside the fluentd container.

  49. 7.5CVE-2019-6800EPSS 1.3%

    In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over HTTP, including scripts which are subsequently executed with root permissions. An attacker with a privileged network po…

  50. 9.8CVE-2016-8900EPSS 2.1%

    Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to change_tags.