CWE-76 · 14 kayıt

Improper Neutralization of Equivalent Special Elements

Bu sınıftaki CVE’ler

14 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
46Planlayın	CVE-2024-34359İstismar yok	llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadataabetlen · llama-cpp-python · CWE-76 pre-auth RCE SSTI	Kritik9,6	—	%26,0	14 May 2024
42Planlayın	CVE-2024-1883İstismar yok	Reflected XSS in PaperCut NG/MFpapercut · papercut mf · CWE-76 Kimlik doğrulamasız XSS	Orta6,1	—	%61,5	14 Mar 2024
39İzleyin	CVE-2024-2952İstismar yok	Server-Side Template Injection in BerriAI/litellmlitellm · litellm · CWE-76 pre-auth RCE SSTI	Kritik9,8	—	%1,3	10 Nis 2024
37İzleyin	CVE-2023-0493Kavram kanıtı	Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserverbtcpayserver · btcpay server · CWE-76	Yüksek8,8	—	%7,9	26 Oca 2023
34İzleyin	CVE-2026-66362İstismar yok	Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configf5 · nginx gateway fabric · CWE-76	Yüksek8,6	—	%0,6	2 Eyl 2026
34İzleyin	CVE-2026-54722İstismar yok	dssrf: there a critical security bug with remove_at_symbol_in_stringhackingrepo · dssrf-js · CWE-76 Kimlik doğrulamasız SSRF	Yüksek8,7	—	%0,6	30 Tem 2026
34İzleyin	CVE-2026-11311İstismar yok	NGINX Gateway Fabric vulnerabilityf5 · nginx gateway fabric · CWE-76	Yüksek8,6	—	%0,6	17 Haz 2026
34İzleyin	CVE-2026-55723İstismar yok	NGINX Ingress Controller vulnerabilityf5 · nginx ingress controller · CWE-76	Yüksek8,7	—	%0,5	15 Tem 2026
34İzleyin	CVE-2026-77180İstismar yok	NGINX Ingress Controller vulnerabilityf5 · nginx ingress controller · CWE-76	Yüksek8,7	—	%0,5	2 Eyl 2026
33İzleyin	CVE-2024-4897İstismar yok	Remote Code Execution in parisneo/lollms-webuilollms · lollms web ui · CWE-76 RCE	Yüksek8,4	—	%0,4	2 Tem 2024
28İzleyin	CVE-2024-1882İstismar yok	Server-side resource injection in PaperCut NG/MFpapercut · papercut mf · CWE-76 RCE	Yüksek7,2	—	%1,4	14 Mar 2024
26İzleyin	CVE-2024-21600İstismar yok	Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge conditionjuniper · junos · CWE-76 Kimlik doğrulamasız Hizmet dışı bırakma	Orta6,5	—	%0,3	11 Oca 2024
21İzleyin	CVE-2023-1149İstismar yok	Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserverbtcpayserver · btcpay server · CWE-76	Orta5,4	—	%0,5	2 Mar 2023
12İzleyin	CVE-2024-1221İstismar yok	Improper access controls on APIs on Linux and macOS in PaperCut NG/MFpapercut · papercut mf · CWE-76	Düşük3,1	—	%0,5	13 Mar 2024

CVE-2024-34359
46Planlayın
llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
KritikCVSS 9,6İstismar yokEPSS %26
- pre-auth RCE
- SSTI
abetlen · llama-cpp-python14 May 2024
CVE-2024-1883
42Planlayın
Reflected XSS in PaperCut NG/MF
OrtaCVSS 6,1İstismar yokEPSS %61
- Kimlik doğrulamasız
- XSS
papercut · papercut mf14 Mar 2024
CVE-2024-2952
39İzleyin
Server-Side Template Injection in BerriAI/litellm
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- SSTI
litellm · litellm10 Nis 2024
CVE-2023-0493
37İzleyin
Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver
YüksekCVSS 8,8Kavram kanıtıEPSS %8
btcpayserver · btcpay server26 Oca 2023
CVE-2026-66362
34İzleyin
Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX config
YüksekCVSS 8,6İstismar yokEPSS %1
f5 · nginx gateway fabric2 Eyl 2026
CVE-2026-54722
34İzleyin
dssrf: there a critical security bug with remove_at_symbol_in_string
YüksekCVSS 8,7İstismar yokEPSS %1
- Kimlik doğrulamasız
- SSRF
hackingrepo · dssrf-js30 Tem 2026
CVE-2026-11311
34İzleyin
NGINX Gateway Fabric vulnerability
YüksekCVSS 8,6İstismar yokEPSS %1
f5 · nginx gateway fabric17 Haz 2026
CVE-2026-55723
34İzleyin
NGINX Ingress Controller vulnerability
YüksekCVSS 8,7İstismar yokEPSS %1
f5 · nginx ingress controller15 Tem 2026
CVE-2026-77180
34İzleyin
NGINX Ingress Controller vulnerability
YüksekCVSS 8,7İstismar yokEPSS %0
f5 · nginx ingress controller2 Eyl 2026
CVE-2024-4897
33İzleyin
Remote Code Execution in parisneo/lollms-webui
YüksekCVSS 8,4İstismar yokEPSS %0
- RCE
lollms · lollms web ui2 Tem 2024
CVE-2024-1882
28İzleyin
Server-side resource injection in PaperCut NG/MF
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
papercut · papercut mf14 Mar 2024
CVE-2024-21600
26İzleyin
Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
juniper · junos11 Oca 2024
CVE-2023-1149
21İzleyin
Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver
OrtaCVSS 5,4İstismar yokEPSS %1
btcpayserver · btcpay server2 Mar 2023
CVE-2024-1221
12İzleyin
Improper access controls on APIs on Linux and macOS in PaperCut NG/MF
DüşükCVSS 3,1İstismar yokEPSS %1
papercut · papercut mf13 Mar 2024

Tüm zafiyet sınıfları