CVE-2019-12387: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...

CVE-2019-12601: Improper Neutralization of Special Elements used in an SQL Command

SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection issue 3 of 3...

CVE-2019-5365: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5364: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5382: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5389: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11953: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11961: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5366: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-7671: Improper Neutralization of Input During Web Page Generation

Prima Systems FlexAir, Versions 2.3.38 and prior. Parameters sent to scripts are not properly sanitized before being returned to the user, which may allow an attacker to execute arbitrary code in a user’s browser session in context of an affected site...

CVE-2019-11952: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5354: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-10149: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in Exim versions 4.87 to 4.91 inclusive. Improper validation of recipient address in delivermessage function in /src/deliver.c may lead to remote command execution...

CVE-2019-5390: Improper Neutralization of Special Elements used in a Command

A remote command injection vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5378: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5380: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5360: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11949: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-5388: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11969: Improper Neutralization of Special Elements used in an Expression Language Statement

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...