CVE-2023-25555

A CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could allow a user that knows the credentials to execute unprivileged shell commands on the appliance over SSH. Affected products: StruxureWare Data Center Expert V7.9.2 an...

CVE-2023-25554

A CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that allows a local privilege escalation on the appliance when a maliciously crafted Operating System command is entered on the device. Affected products: StruxureWare Data Cent...

The vulnerability of the closed software environment of the Cisco Identity Services Engine allows a perpetrator to increase their privileges.

The vulnerability of the closed software environment of the Cisco Identity Services Engine exists due to the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2023-1873

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Faturamatik Bircard allows SQL Injection. This issue affects Bircard: before 23.04.05...

The vulnerability of the curl command-line utility relates to its inability to clean up special elements in another plane, allowing a malicious actor to execute arbitrary code within the system.

The vulnerability of the curl command-line utility is related to data exchange using the TELNET protocol. This allows a malicious individual to send a specially created username and “telnet parameters” during server authentication. Exploiting this vulnerability enables a remote attacker to send...

The vulnerability of the execution environment for JavaScript and TypeScript Deno, related to the lack of measures to neutralize special control elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the execution environment for JavaScript and TypeScript in Deno is related to the lack of measures to neutralize special control elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2023-9514 · Openlink +4 · Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: Virtuoso-opensource version 7.2.9 Description: The issue is related to the libc malloc component of the Virtuoso-opensource platform, which is associated with the incorrect neutralization of special elements used in SQL commands. This can all...

The vulnerability of Cisco IOS XE operating systems on Cisco Catalyst 9300 switches arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of Cisco IOS XE-enabled Cisco Catalyst 9300 switches exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

The vulnerabilities of the closed software environment of Cisco Evolved Programmable Network Manager, the Cisco Identity Services Engine, the Cisco Prime Infrastructure – systems for monitoring and managing network equipment – allow attackers to escalate their privileges.

The vulnerability of the closed-programming environment of Cisco Evolved Programmable Network Manager, the Cisco Identity Services Engine, and the Cisco Prime Infrastructure system for network monitoring and management exists due to the lack of measures taken to neutralize special elements used i...

FortiWeb & FortiADC - OS command injection in CLI

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the command line interpreter of FortiWeb & FortiADC may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands...

The vulnerability of the WebShare component of the Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the WebShare component of the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of Google Chrome browser extensions, which allows a violator to disclose protected information

The vulnerability of Google Chrome’s browser extensions is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

The vulnerability of the FedCM component in the Google Chrome browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the FedCM component in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through...

The vulnerability of the graphical and application software interface of the FortiTester hardware-based diagnostic and audit software exists due to the failure to take measures to neutralize the special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of the graphical and application software interface of the FortiTester hardware-based diagnostic and audit software exists due to the failure to take measures to neutralize the special elements used in the operating system command set. Exploiting this vulnerability allows a...

CVE-2023-1758 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in the improper elimination of certain elements in the output data, allowing attackers to execute arbitrary commands.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to the incorrect elimination of certain elements in the output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by injecting specially crafted Spring templates...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Akbim Computer Panon allows SQL Injection.This issue affects Panon: before 1.0.2...

Cross-Site Scripting (XSS)

rails is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of user-input sanitization in HTML elements, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat arises from the lack of measures taken to neutralize special elements used in the operating system’s command line. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a...

SUSE CVE-2023-23913

There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method,...