Skip to content
Noroxi

CWE-791 · 39 records

Incomplete Filtering of Special Elements

CVEs in this class

39 records

  • CVE-2022-2132
    35Monitor

    A permissive list of allowed inputs flaw was found in DPDK.

    HighCVSS 8.6No exploitEPSS 2%

    dpdk · data plane development kitAug 31, 2022

  • CVE-2024-47590
    35Monitor

    Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher

    HighCVSS 8.8No exploitEPSS 0%

    sap_se · sap web dispatcherNov 11, 2024

  • CVE-2025-0324
    35Monitor

    The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.

    HighCVSS 8.8Proof of conceptEPSS 0%

    axis · axis osJun 2, 2025

  • CVE-2026-44232
    34Monitor

    dssrf: every IPv6 category bypasses is_url_safe

    HighCVSS 8.7No exploitEPSS 0%

    hackingrepo · dssrf-jsMay 12, 2026

  • CVE-2024-39283
    34Monitor

    Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to

    HighCVSS 8.5No exploitEPSS 0%

    intel · tdx moduleAug 14, 2024

  • CVE-2024-45481
    34Monitor

    Improper authentication in SSH of B&R APROL

    HighCVSS 8.5No exploitEPSS 0%

    b&r industrial automation · b&r aprolMar 25, 2025

  • CVE-2026-11998
    30Monitor

    AngularJS XSS via SCE resource URL sanitization bypass

    HighCVSS 7.6No exploitEPSS 0%

    google · angularjsJun 24, 2026

  • CVE-2023-31172
    29Monitor

    Incomplete Filtering of Special Elements

    HighCVSS 7.4No exploitEPSS 0%

    selinc · sel-5030 acselerator quicksetAug 31, 2023

  • CVE-2026-86206
    27Monitor

    Access control filter bypass allows unauthorised access to APIs

    MediumCVSS 6.9Proof of conceptEPSS 1%

    n-able · n-centralSep 5, 2026

  • CVE-2025-59303
    25Monitor

    HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with

    MediumCVSS 6.4No exploitEPSS 0%

    haproxy · haproxy kubernetes ingress controllerOct 8, 2025

  • CVE-2025-6761
    22Monitor

    Kingdee Cloud-Starry-Sky Enterprise Edition Freemarker Engine DynamicForm 4 Action.class plugin.buildMobilePopHtml special elements used in a template engine

    MediumCVSS 5.5No exploitEPSS 0%

    kingdee · cloud-starry-sky enterprise editionJun 27, 2025

  • CVE-2023-1076
    22Monitor

    A flaw was found in the Linux Kernel.

    MediumCVSS 5.5No exploitEPSS 0%

    linux · linux kernelMar 27, 2023

  • CVE-2025-5325
    21Monitor

    zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testService special elements used in a template engine

    MediumCVSS 5.3No exploitEPSS 0%

    zhilink · adp application developer platformMay 29, 2025

  • CVE-2025-2040
    21Monitor

    zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine

    MediumCVSS 5.3No exploitEPSS 0%

    iocoder · ruoyi-vue-proMar 6, 2025

  • CVE-2020-36827
    21Monitor

    The XAO::Web module before 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::Action.

    MediumCVSS 5.4No exploitEPSS 0%

    Mar 23, 2024

  • CVE-2026-3714
    20Monitor

    OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine

    MediumCVSS 5.1No exploitEPSS 0%

    opencart · opencartMar 8, 2026

  • CVE-2025-3841
    19Monitor

    wix-incubator jam Jinja2 Template jam.py special elements used in a template engine

    MediumCVSS 4.8No exploitEPSS 0%

    wix · jamApr 21, 2025

  • CVE-2025-0716
    19Monitor

    AngularJS improper sanitization in SVG '<image>' element

    MediumCVSS 4.8No exploitEPSS 0%

    google · angularjsApr 29, 2025

  • CVE-2025-2336
    19Monitor

    AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

    MediumCVSS 4.8No exploitEPSS 0%

    google · angularjsJun 4, 2025

  • CVE-2024-8373
    17Monitor

    AngularJS improper sanitization in '<source>' element

    MediumCVSS 4.3No exploitEPSS 0%

    angularjs · angularjsSep 9, 2024

  • CVE-2024-32162
    17Monitor

    CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion.

    MediumCVSS 4.3No exploitEPSS 0%

    cmseasy · cmseasyApr 17, 2024

  • CVE-2026-2969
    8Monitor

    datapizza-labs datapizza-ai Jinja2 Template prompt.py ChatPromptTemplate special elements used in a template engine

    LowCVSS 2.0No exploitEPSS 0%

    datapizza · datapizza aiFeb 23, 2026

  • CVE-2026-19929
    8Monitor

    OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engine

    LowCVSS 2.1No exploitEPSS 0%

    Aug 15, 2026

  • CVE-2025-14731
    8Monitor

    CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine

    LowCVSS 2.1No exploitEPSS 0%

    ctcms project · ctcmsDec 16, 2025

  • CVE-2026-3725
    8Monitor

    1024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine

    LowCVSS 2.1No exploitEPSS 0%

    lab1024 · smartadminMar 8, 2026

All vulnerability classes