İçeriğe atla
Noroxi

CWE-791 · 37 kayıt

Incomplete Filtering of Special Elements

Bu sınıftaki CVE’ler

37 kayıt

  • CVE-2022-2132
    35İzleyin

    A permissive list of allowed inputs flaw was found in DPDK.

    YüksekCVSS 8,6İstismar yokEPSS %2

    dpdk · data plane development kit31 Ağu 2022

  • CVE-2024-47590
    35İzleyin

    Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher

    YüksekCVSS 8,8İstismar yokEPSS %1

    sap_se · sap web dispatcher11 Kas 2024

  • CVE-2025-0324
    35İzleyin

    The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    axis · axis os2 Haz 2025

  • CVE-2026-44232
    34İzleyin

    dssrf: every IPv6 category bypasses is_url_safe

    YüksekCVSS 8,7İstismar yokEPSS %0

    hackingrepo · dssrf-js12 May 2026

  • CVE-2024-39283
    34İzleyin

    Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to

    YüksekCVSS 8,5İstismar yokEPSS %0

    intel · tdx module14 Ağu 2024

  • CVE-2024-45481
    34İzleyin

    Improper authentication in SSH of B&R APROL

    YüksekCVSS 8,5İstismar yokEPSS %0

    b&r industrial automation · b&r aprol25 Mar 2025

  • CVE-2026-11998
    30İzleyin

    AngularJS XSS via SCE resource URL sanitization bypass

    YüksekCVSS 7,6İstismar yokEPSS %1

    google · angularjs24 Haz 2026

  • CVE-2023-31172
    29İzleyin

    Incomplete Filtering of Special Elements

    YüksekCVSS 7,4İstismar yokEPSS %0

    selinc · sel-5030 acselerator quickset31 Ağu 2023

  • CVE-2026-86206
    27İzleyin

    Access control filter bypass allows unauthorised access to APIs

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    n-able · n-central5 Eyl 2026

  • CVE-2025-59303
    25İzleyin

    HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with

    OrtaCVSS 6,4İstismar yokEPSS %0

    haproxy · haproxy kubernetes ingress controller8 Eki 2025

  • CVE-2025-6761
    22İzleyin

    Kingdee Cloud-Starry-Sky Enterprise Edition Freemarker Engine DynamicForm 4 Action.class plugin.buildMobilePopHtml special elements used in a template engine

    OrtaCVSS 5,5İstismar yokEPSS %0

    kingdee · cloud-starry-sky enterprise edition27 Haz 2025

  • CVE-2023-1076
    22İzleyin

    A flaw was found in the Linux Kernel.

    OrtaCVSS 5,5İstismar yokEPSS %0

    linux · linux kernel27 Mar 2023

  • GHSA-vjgj-42f6-7997
    22İzleyin

    netfoil's optional seccomp sandboxing was not applied

    OrtaCVSS 5,5İstismar yok

    Go · github.com/tinfoil-factory/netfoil29 Nis 2026

  • CVE-2025-5325
    21İzleyin

    zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testService special elements used in a template engine

    OrtaCVSS 5,3İstismar yokEPSS %0

    zhilink · adp application developer platform29 May 2025

  • CVE-2025-2040
    21İzleyin

    zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine

    OrtaCVSS 5,3İstismar yokEPSS %0

    iocoder · ruoyi-vue-pro6 Mar 2025

  • CVE-2020-36827
    21İzleyin

    The XAO::Web module before 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::Action.

    OrtaCVSS 5,4İstismar yokEPSS %0

    23 Mar 2024

  • CVE-2026-3714
    20İzleyin

    OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine

    OrtaCVSS 5,1İstismar yokEPSS %0

    opencart · opencart8 Mar 2026

  • CVE-2025-3841
    19İzleyin

    wix-incubator jam Jinja2 Template jam.py special elements used in a template engine

    OrtaCVSS 4,8İstismar yokEPSS %0

    wix · jam21 Nis 2025

  • CVE-2025-0716
    19İzleyin

    AngularJS improper sanitization in SVG '<image>' element

    OrtaCVSS 4,8İstismar yokEPSS %0

    google · angularjs29 Nis 2025

  • CVE-2025-2336
    19İzleyin

    AngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'

    OrtaCVSS 4,8İstismar yokEPSS %0

    google · angularjs4 Haz 2025

  • CVE-2024-8373
    17İzleyin

    AngularJS improper sanitization in '<source>' element

    OrtaCVSS 4,3İstismar yokEPSS %1

    angularjs · angularjs9 Eyl 2024

  • CVE-2024-32162
    17İzleyin

    CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion.

    OrtaCVSS 4,3İstismar yokEPSS %0

    cmseasy · cmseasy17 Nis 2024

  • CVE-2026-2969
    8İzleyin

    datapizza-labs datapizza-ai Jinja2 Template prompt.py ChatPromptTemplate special elements used in a template engine

    DüşükCVSS 2,0İstismar yokEPSS %1

    datapizza · datapizza ai23 Şub 2026

  • CVE-2026-3725
    8İzleyin

    1024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine

    DüşükCVSS 2,1İstismar yokEPSS %1

    lab1024 · smartadmin8 Mar 2026

  • CVE-2026-19929
    8İzleyin

    OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engine

    DüşükCVSS 2,1İstismar yokEPSS %0

    15 Ağu 2026

Tüm zafiyet sınıfları