cve.bz

CWE-794: Incomplete Filtering of Multiple Instances of Special Elements

Filter

The product receives data from an upstream component, but it does not filter all instances of a special element before sending it to a downstream component.

What the weakness is: CWE-794 at MITRE. All weaknesses

Ask an AI about CWE-794

Show the promptExplain CWE-794: Incomplete Filtering of Multiple Instances of Special Elements and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/794.html and https://cve.bz/cve/cwe/794?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.3CVE-2026-21876ExploitEPSS 17%

    The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart requests with multi…

  2. 7.5CVE-2021-0233EPSS 1.0%

    A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting in a Forwarding Engine Board (FFEB) cr…

  3. 8.6CVE-2021-0203EPSS 1.0%

    On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group (RTG), Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the devi…

  4. 5.3CVE-2020-1665EPSS 1.3%

    On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service (DDoS) protection might not take affect when it reaches the threshold condition. The DDoS protection allows the device to contin…

  5. 9.8CVE-2019-0002EPSS 2.4%

    On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will…