Skip to content
Noroxi

CWE-172 · 23 records

Encoding Error

CVEs in this class

23 records

  • CVE-2019-10160
    41Plan

    A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7

    CriticalCVSS 9.8No exploitEPSS 5%

    python · pythonJun 7, 2019

  • CVE-2016-6691
    39Monitor

    service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android before 2016-10-05 allows remote attackers to

    CriticalCVSS 9.8No exploitEPSS 1%

    google · androidOct 10, 2016

  • CVE-2025-27110
    31Monitor

    Libmodsecurity3 has possible bypass of encoded HTML entities

    HighCVSS 7.9No exploitEPSS 0%

    trustwave · modsecurityFeb 25, 2025

  • CVE-2026-95101
    27Monitor

    NGINX ngx_http_v3_module vulnerability

    MediumCVSS 6.9No exploitEPSS 0%

    f5 · nginx plusOct 14, 2026

  • CVE-2019-12677
    26Monitor

    Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    cisco · adaptive security appliance softwareOct 2, 2019

  • CVE-2026-42926
    25Monitor

    NGINX ngx_http_proxy_v2_module vulnerability

    MediumCVSS 6.3Proof of conceptEPSS 0%

    f5 · nginx gateway fabricMay 13, 2026

  • CVE-2026-106122
    24Monitor

    RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers

    MediumCVSS 6.0No exploitEPSS 0%

    vmware · rabbitmq java clientOct 6, 2026

  • CVE-2026-110306
    24Monitor

    fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

    MediumCVSS 6.1No exploitEPSS 0%

    fast-uri · fast-uriOct 20, 2026

  • CVE-2026-104774
    23Monitor

    OWASP Coraza WAF: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass

    MediumCVSS 5.8No exploitEPSS 0%

    corazawaf · corazaOct 12, 2026

  • CVE-2018-7173
    22Monitor

    A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappro

    MediumCVSS 5.5No exploitEPSS 0%

    xpdfreader · xpdfFeb 15, 2018

  • CVE-2016-3827
    22Monitor

    codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remo

    MediumCVSS 5.5No exploitEPSS 0%

    google · androidAug 5, 2016

  • CVE-2016-3829
    22Monitor

    The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain structure members, which allows remote attack

    MediumCVSS 5.5No exploitEPSS 0%

    google · androidAug 5, 2016

  • CVE-2016-3828
    22Monitor

    decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers

    MediumCVSS 5.5No exploitEPSS 0%

    google · androidAug 5, 2016

  • CVE-2026-100891
    22Monitor

    Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error

    MediumCVSS 5.5No exploitEPSS 0%

    trusted domain project · opendmarcSep 28, 2026

  • CVE-2019-10153
    21Monitor

    A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields woul

    MediumCVSS 5.0No exploitEPSS 2%

    clusterlabs · fence-agentsJul 30, 2019

  • CVE-2026-48784
    20Monitor

    Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization

    MediumCVSS 5.1No exploitEPSS 0%

    sensiolabs · symfonyJul 14, 2026

  • CVE-2026-86818
    19Monitor

    fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization

    MediumCVSS 4.8No exploitEPSS 0%

    fast-uri · fast-uriSep 15, 2026

  • CVE-2018-2415
    18Monitor

    SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; J2EE Engine Ser

    MediumCVSS 4.7No exploitEPSS 1%

    sap · netweaver java web container and http service engineMay 9, 2018

  • CVE-2018-7289
    14Monitor

    An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2.

    LowCVSS 3.3Proof of conceptEPSS 1%

    teclib-edition · armadito antivirusFeb 21, 2018

  • CVE-2021-33604
    10Monitor

    Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19

    LowCVSS 2.5No exploitEPSS 0%

    vaadin · flow-serverJun 24, 2021

  • GHSA-8vfw-v2jv-9hwc
    10Monitor

    Reflected cross-site scripting in development mode handler in Vaadin

    LowCVSS 2.5No exploit

    Maven · com.vaadin:flow-serverJun 28, 2021

  • CVE-2024-48909
    9Monitor

    SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not

    LowCVSS 2.4No exploitEPSS 0%

    authzed · spicedbOct 14, 2024

  • GHSA-cx7h-h87r-jpgr
    0Monitor

    The kstring integration in gix-attributes is unsound

    LowNo exploit

    crates.io · gix-attributesJul 25, 2024

All vulnerability classes