Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

CVEs (4,976)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-6603 1Promise 1Webpam Proe Jun 17, 2026 Feb 7, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Injection attacks via JavaScript code in a PHPSESSID cookie.
CVE-2018-6289 1Kaspersky 1Secure Mail Gateway Jun 17, 2026 Feb 6, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Configuration file injection leading to Code Execution as Root in Kaspersky Secure Mail Gateway version 1.1.
CVE-2018-6519 2Debian Simplesamlphp 2Debian Linux Saml2 Jun 17, 2026 Feb 2, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a timestamp.
CVE-2017-14523 1Wondercms 1Wondercms Nov 21, 2024 Jan 26, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses user-entered values to redirect pages. NOTE: the vendor reports that exploitation is unlikely because the attack can only come from a local m...Show more WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses user-entered values to redirect pages. NOTE: the vendor reports that exploitation is unlikely because the attack can only come from a local machine or from the administrator as a self attackShow less
CVE-2017-18049 1Silverstripe 1Silverstripe Nov 21, 2024 Jan 23, 2018 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into co...Show more In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software (including Microsoft Excel). For example, the CSV data may contain untrusted user input from the "First Name" field of a user's /myprofile page.Show less
CVE-2017-14094 1Trendmicro 1Smart Protection Server Nov 21, 2024 Jan 19, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system.
CVE-2014-7952 1Google 1Android Nov 21, 2024 Jan 12, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveraging failure to filter application data streams.
CVE-2017-15714 1Apache 1Ofbiz Nov 21, 2024 Jan 4, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed. This allows for code injection by passing that code through the URL. For example by appending this code "__format=%27;alert...Show more The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed. This allows for code injection by passing that code through the URL. For example by appending this code "__format=%27;alert(%27xss%27)" to the URL an alert window would execute.Show less
CVE-2017-1000493 1Rocketchat 1Rocket.chat Nov 21, 2024 Jan 3, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover
CVE-2017-1000454 1Cmsmadesimple 1Cms Made Simple Nov 21, 2024 Jan 2, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1
CVE-2017-1000453 1Cmsmadesimple 1Cms Made Simple Nov 21, 2024 Jan 2, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution.
CVE-2013-4578 1Oracle 2Jdk Jre May 13, 2026 Dec 29, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.
CVE-2016-3695 2Linux Redhat 2Enterprise Linux Linux Kernel May 13, 2026 Dec 29, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 The einj_error_inject function in drivers/acpi/apei/einj.c in the Linux kernel allows local users to simulate hardware errors and consequently cause a denial of service by leveraging failure to disable APEI error injecti...Show more The einj_error_inject function in drivers/acpi/apei/einj.c in the Linux kernel allows local users to simulate hardware errors and consequently cause a denial of service by leveraging failure to disable APEI error injection through EINJ when securelevel is set.Show less
CVE-2017-15313 1Huawei 1Smartcare May 13, 2026 Dec 22, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Huawei SmartCare V200R003C10 has a CSV injection vulnerability. An remote authenticated attacker could inject malicious CSV expression to the affected device.
CVE-2017-16766 1Synology 1Diskstation Manager May 13, 2026 Dec 22, 2017 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users to inject arbitrary web script or HTML via the -fn option.
CVE-2017-17790 1Ruby Lang 1Ruby May 13, 2026 Dec 20, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '\|' character, a differ...Show more The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '\|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input may be highly unlikely.Show less
CVE-2017-17535 1Gjots2 Project 1Gjots2 May 13, 2026 Dec 14, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 lib/gui.py in Bob Hepple gjots2 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a c...Show more lib/gui.py in Bob Hepple gjots2 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.Show less
CVE-2017-17534 1Mensis Project 1Mensis May 13, 2026 Dec 14, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 uiutil.c in Mensis 0.0.080507 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted U...Show more uiutil.c in Mensis 0.0.080507 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, a different vulnerability than CVE-2017-17521.Show less
CVE-2017-17533 1Tkabber Project 1Tkabber May 13, 2026 Dec 14, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 default.tcl in Tkabber 1.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL....Show more default.tcl in Tkabber 1.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the attack cannot occur because of the argument-parsing behavior of the Tcl exec functionShow less
CVE-2017-17532 1Kiwi Project 1Kiwi May 13, 2026 Dec 14, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 examples/framework/news/news3.py in Kiwi 1.9.22 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attac...Show more examples/framework/news/news3.py in Kiwi 1.9.22 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.Show less

Previous 1...243244245...249 Next