CWE-116

High likelihood

Improper Encoding or Escaping of Output

Parent: CWE-707 - Improper Neutralization

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

482 vulnerabilities with CWE-116
CVE-2023-5654 MEDIUM
React Developer Tools <= 4.28.4 - Browser-Mediated Arbitrary URL Fetch
CVSS 6.5
CVE-2023-43620 HIGH
schollz/croc < 9.6.5 and >=0 < 9.6.16 - Terminal Injection via ANSI/CSI Escape Sequences in Filename
CVSS 7.8
CVE-2023-41889 MEDIUM
SHIRASAGI <1.18.0 - Info Disclosure
CVSS 5.3
CVE-2023-37875 LOW
Wing FTP Server <= 7.2.0 - Cross-Site Scripting in User Web Client
CVSS 3.0
CVE-2023-4571 HIGH
Splunk IT Service Intelligence <4.13.3, 4.15.3, 4.17.1 - Code Injec...
CVSS 8.6
CVE-2023-3481 MEDIUM
Critters 0.0.17-0.0.19 - Cross-Site Scripting in HTML Parser
CVSS 5.7
CVE-2023-39390 HIGH
Window Management Module - Info Disclosure
CVSS 7.5
CVE-2023-39386 HIGH
Huawei EMUI and HarmonyOS - Denial of Service via PMS Module Input Parameter
CVSS 7.5
CVE-2023-39382 HIGH
Huawei EMUI and HarmonyOS - Denial of Service via Audio Module Input Verification
CVSS 7.5
CVE-2023-39381 HIGH
Huawei EMUI and HarmonyOS - Input Verification Vulnerability in Storage Module
CVSS 7.5
CVE-2023-40014 MEDIUM
OpenZeppelin Contracts <4.9.3 - Info Disclosure
CVSS 5.3
CVE-2023-39527 HIGH
PrestaShop < 1.7.8.10, 8.0.5, 8.1.1 - Cross-Site Scripting via isCleanHTML Method
CVSS 8.3
CVE-2023-3997 HIGH
Splunk SOAR <6.1.0 - Code Injection
CVSS 8.6
CVE-2023-35941 HIGH
Envoy <1.27.0-1.23.12 - Auth Bypass
CVSS 8.6
CVE-2023-34036 MEDIUM
Reactive web apps using Spring HATEOAS - SSRF
CVSS 5.3
CVE-2023-3668 HIGH
GitHub froxlor/froxlor <2.0.21 - XSS
CVSS 7.2
CVE-2023-24480 CRITICAL
Honeywell C300 Firmware 501.1-501.6hf8 - Denial of Service via Message Decoding Stack Overflow
CVSS 9.8
CVE-2023-2200 MEDIUM
GitLab CE/EE <15.11.10, <16.0.6, <16.1.1 - XSS
CVSS 4.1
CVE-2023-36921 HIGH
SAP Solution Manager (Diagnostics agent) -7.20 - SSRF
CVSS 7.2
CVE-2023-36919 MEDIUM
SAP Enable Now - Unauthenticated Exposure of Sensitive Information via Missing Referrer-Policy Header
CVSS 5.3
CVE-2023-3552 MEDIUM
nilsteampassnet/teampass <3.0.10 - Info Disclosure
CVSS 5.4
CVE-2023-32301 LOW
Discourse <3.0.4-3.1.0.beta5 - Info Disclosure
CVSS 3.1
CVE-2023-3190 MEDIUM
nilsteampassnet/teampass <3.0.9 - Info Disclosure
CVSS 4.6
CVE-2023-29543 HIGH
Firefox and Focus for Android < 112.0 - Use-After-Free in Debugger Vector
CVSS 8.8
CVE-2023-29541 HIGH
Firefox < 112.0 - Arbitrary Command Execution via .desktop File Download
CVSS 8.8
Details
Vulnerabilities 482
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits