CVE-2023-36892: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2023-38188: Improper Neutralization of Input During Web Page Generation

Azure Apache Hadoop Spoofing Vulnerability...

CVE-2023-38044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-34477

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-34477

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-23758

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-23757

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-23757

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

Joomla! Creative Gallery SQL Injection Vulnerability

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Creative Gallery that stems from improper neutralization of special elements, which can lead to SQL injection...

BA Gallery SQL Injection Vulnerability in Joomla!

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! BA Gallery that stems from improper neutralization of special elements, which can lead to SQL injection...

Online Virtual Classroom SQL Injection Vulnerability in Joomla!

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Online Virtual Classroom that stems from improper neutralization of special elements, which can lead to SQL injection...

HikaShop Joomla Component SQL Injection Vulnerability

HikaShop Joomla Component is an e-commerce component from the Hikari team for use in the Joomla content management system. A security vulnerability exists in HikaShop Joomla Component versions 4.4.1 through 4.7.2, which stems from improper neutralization of a special element, resulting in SQL...

CVE-2023-4157 Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in GitHub repository omeka/omeka-s prior to version 4.0.3...

CVE-2023-4136: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CrafterCMS Engine on Windows, MacOS, Linux, x86, ARM, 64 bit allows Reflected XSS.This issue affects CrafterCMS: from 4.0.0 through 4.0.2, from 3.1.0 through 3.1.27...

CVE-2023-3978: Improper Neutralization of Input During Web Page Generation

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...

CVE-2023-4006

CVE-2023-4006 affects phpMyFAQ before version 3.1.16. The vulnerability arises from improper neutralization of formula elements in CSV files processed by phpMyFAQ, enabling affects to potentially exploit crafted CSV content. Impact per CVSS (NVD) is Critical (C:H/I:H/A:H) with network attack vect...

CVE-2023-37219

Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File...

Design/Logic Flaw

Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File...

Tadiran Telecom Composit 安全漏洞

Tadiran Telecom Composit is a unified communications and collaboration platform from Tadiran Telecom, Israel. A security vulnerability exists in Tadiran Telecom Composit that stems from a CSV file with improper element neutralization...