CVE-2015-9300: Improper Neutralization of Input During Web Page Generation

The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues...

CVE-2015-9302: Improper Neutralization of Input During Web Page Generation

The simple-fields plugin before 1.4.11 for WordPress has XSS...

CVE-2019-14967: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability...

CVE-2019-14945: Improper Neutralization of Input During Web Page Generation

The ultimate-member plugin before 2.0.54 for WordPress has XSS...

CVE-2017-18501: Improper Neutralization of Input During Web Page Generation

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

CVE-2017-18503: Improper Neutralization of Input During Web Page Generation

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...

CVE-2016-10873: Improper Neutralization of Input During Web Page Generation

The wp-database-backup plugin before 4.3.3 for WordPress has XSS...

CVE-2016-10875: Improper Neutralization of Input During Web Page Generation

The wp-database-backup plugin before 4.3.1 for WordPress has XSS...

CVE-2017-18400: Improper Neutralization of Special Elements used in a Command

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

CVE-2019-1020010: Improper Neutralization of Input During Web Page Generation

Misskey before 10.102.4 allows hijacking a user's token...

CVE-2019-9811: Improper Neutralization of Special Elements in Output Used by a Downstream Component

As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...

CVE-2019-0326: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform BI Workspace Enterprise, versions 4.1, 4.2, 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2018-19574: Improper Neutralization of Input During Web Page Generation

GitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in the OAuth authorization page...

CVE-2019-13478: Improper Neutralization of Input During Web Page Generation

The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions...

CVE-2017-15694: Improper Neutralization of Argument Delimiters in a Command

When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster...

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in @apollo/gateway...

VulnCheck KEV: CVE-2017-5173

An Improper Neutralization of Special Elements in an OS command issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call...

CVE-2019-0311: Improper Neutralization of Input During Web Page Generation

Automotive Dealer Portal in SAP R/3 Enterprise Application versions: 600, 602, 603, 604, 605, 606, 616, 617 does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious...

CVE-2019-0304: Improper Neutralization of Special Elements in Output Used by a Downstream Component

FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inje...

CVE-2019-3409: Improper Neutralization of Special Elements used in an OS Command

All versions up to UKBBWF820+1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnerability. Due to inadequate parameter verification, unauthorized users can take advantage of this vulnerability to control the user terminal system...