CWE-790 · 14 kayıt

Improper Filtering of Special Elements

Bu sınıftaki CVE’ler

14 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2023-45239Kavram kanıtı	A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker facebook · tac plus · CWE-790 pre-auth RCE	Kritik9,8	—	%1,9	6 Eki 2023
40Planlayın	GHSA-8mwq-mj73-qv68İstismar yok	Duplicate advisory: Sequelize vulnerable to Improper Filtering of Special Elementsnpm · @sequelize/core · CWE-790 Kimlik doğrulamasız	Kritik10,0	—	—	16 Şub 2023
39İzleyin	CVE-2023-22578İstismar yok	Sequalize - Default support for “raw attributes” when using parenthesessequelizejs · sequelize · CWE-790 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,8	16 Şub 2023
36İzleyin	CVE-2021-43802İstismar yok	Admin privilege escalation and arbitrary code execution via malicious *.etherpad importsetherpad · etherpad · CWE-790 RCE	Yüksek8,8	—	%2,0	9 Ara 2021
35İzleyin	CVE-2024-31616İstismar yok	An issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version RSR10-01G-T-S_RSR_3.0(1)B9P2, Release(0715CWE-790 RCE	Yüksek8,8	—	%0,8	23 Nis 2024
35İzleyin	CVE-2024-42416İstismar yok	Multiple issues in ctl(4) CAM Target Layerfreebsd · freebsd · CWE-790 RCE	Yüksek8,8	—	%0,4	5 Eyl 2024
30İzleyin	CVE-2026-11331İstismar yok	Potential wildcard CNAME RPZ policy bypassisc · bind 9 · CWE-790 Kimlik doğrulamasız	Yüksek7,5	—	%0,4	22 Tem 2026
30İzleyin	CVE-2026-2328İstismar yok	Backend Access Due to Insufficient Input Validationwago · device sphere · CWE-790 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%0,3	30 Mar 2026
28İzleyin	CVE-2025-27260İstismar yok	Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerabilityericsson · indoor connect 8855 firmware · CWE-790	Yüksek7,2	—	%0,2	25 Mar 2026
26İzleyin	CVE-2024-47984İstismar yok	Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability.dell · recoverpoint for virtual machines · CWE-790 Hizmet dışı bırakma	Orta6,5	—	%0,5	13 Ara 2024
23İzleyin	CVE-2025-0431İstismar yok	Enterprise Protection Backslash URL Rewrite Bypassproofpoint · enterprise protection · CWE-790 Kimlik doğrulamasız	Orta5,8	—	%0,4	19 Mar 2025
21İzleyin	CVE-2024-6540İstismar yok	Information exlosure in external interfaceotrs · otrs · CWE-790	Orta5,3	—	%0,4	15 Tem 2024
19İzleyin	CVE-2024-43442İstismar yok	Stored XSS in System Configurationotrs ag · otrs · CWE-790 XSS	Orta4,9	—	%0,4	26 Ağu 2024
19İzleyin	CVE-2024-43443İstismar yok	Stored XSS in process managementotrs ag · otrs · CWE-790 XSS	Orta4,9	—	%0,4	26 Ağu 2024

CVE-2023-45239
40Planlayın
A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker
KritikCVSS 9,8Kavram kanıtıEPSS %2
- pre-auth RCE
facebook · tac plus6 Eki 2023
GHSA-8mwq-mj73-qv68
40Planlayın
Duplicate advisory: Sequelize vulnerable to Improper Filtering of Special Elements
KritikCVSS 10,0İstismar yok
- Kimlik doğrulamasız
npm · @sequelize/core16 Şub 2023
CVE-2023-22578
39İzleyin
Sequalize - Default support for “raw attributes” when using parentheses
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
sequelizejs · sequelize16 Şub 2023
CVE-2021-43802
36İzleyin
Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
etherpad · etherpad9 Ara 2021
CVE-2024-31616
35İzleyin
An issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version RSR10-01G-T-S_RSR_3.0(1)B9P2, Release(0715
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
23 Nis 2024
CVE-2024-42416
35İzleyin
Multiple issues in ctl(4) CAM Target Layer
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
freebsd · freebsd5 Eyl 2024
CVE-2026-11331
30İzleyin
Potential wildcard CNAME RPZ policy bypass
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
isc · bind 922 Tem 2026
CVE-2026-2328
30İzleyin
Backend Access Due to Insufficient Input Validation
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
wago · device sphere30 Mar 2026
CVE-2025-27260
28İzleyin
Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0
ericsson · indoor connect 8855 firmware25 Mar 2026
CVE-2024-47984
26İzleyin
Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability.
OrtaCVSS 6,5İstismar yokEPSS %0
- Hizmet dışı bırakma
dell · recoverpoint for virtual machines13 Ara 2024
CVE-2025-0431
23İzleyin
Enterprise Protection Backslash URL Rewrite Bypass
OrtaCVSS 5,8İstismar yokEPSS %0
- Kimlik doğrulamasız
proofpoint · enterprise protection19 Mar 2025
CVE-2024-6540
21İzleyin
Information exlosure in external interface
OrtaCVSS 5,3İstismar yokEPSS %0
otrs · otrs15 Tem 2024
CVE-2024-43442
19İzleyin
Stored XSS in System Configuration
OrtaCVSS 4,9İstismar yokEPSS %0
- XSS
otrs ag · otrs26 Ağu 2024
CVE-2024-43443
19İzleyin
Stored XSS in process management
OrtaCVSS 4,9İstismar yokEPSS %0
- XSS
otrs ag · otrs26 Ağu 2024

Tüm zafiyet sınıfları