CWE-117

Medium likelihood

Improper Output Neutralization for Logs

Parent: CWE-116 - Improper Encoding or Escaping of Output

The product constructs a log message from external input, but it does not neutralize or incorrectly neutralizes special elements when the message is written to a log file.

102 vulnerabilities with CWE-117

CVE-2018-10932 MEDIUM

Intel lldptool < 1.0.1 - Terminal Injection via Unsanitized mngAddr Buffer

CVSS 4.3

CVE-2015-10011 MEDIUM

OpenDNS OpenResolve - Info Disclosure

CVSS 4.6

Details

Vulnerabilities 102

Exploit Likelihood Medium

Links