CVE-2021-43929

Improper neutralization of special elements in output used by a downstream component 'Injection' vulnerability in work flow management in Synology DiskStation Manager DSM before 7.0.1-42218-2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Adobe Premiere Elements Installed (macOS)

Binary data adobepremiereelementsmacinstalled.nbin...

WordPress Plugin: All-in-One Floating Contact Form – Cross-Site Script Vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. wordpress Plugin All-in-one Floating Contact Form...

CVE-2022-0148: Improper Neutralization of Input During Web Page Generation

The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin before 2.0.4 was vulnerable to reflected XSS on the my-sticky-elements-leads admin page...

Root Service Privilege Escalation

The vulnerability of the Root Service function in distributed control systems such as CENTUM VP and CENTUM VP Entry Class is related to the failure to take measures to neutralize special elements used in operating system processes. Exploiting this vulnerability can allow attackers to enhance thei...

CVE-2021-41018

CVE-2021-41018 affects Fortinet FortiWeb OS command injection via improper neutralization of special elements in HTTP requests. Affected are FortiWeb versions 6.4.1 and below, and 6.3.15 and below. The vulnerability can allow an attacker to execute unauthorized code or commands through crafted HT...

CVE-2021-25085

The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woofredrawelements before outputing back in an admin page, leading to a Reflected Cross-Site Scripting...

WordPress plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. WordPress WOOF plugin has a cross-site scripting vulnerability in versions prior to 1.2.6.3, which stems from the lack of escaping of woofredrawelements and can be exploited by attackers to...

PT-2022-9641

Name of the Vulnerable Software and Affected Versions WOOF WordPress plugin versions prior to 1.2.6.3 Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the woof redraw elements is not properly sanitised and escaped before being outputted back in an admin...

Jenkins Docker Commons Plugin Command Injection

The vulnerability of the Jenkins Docker Commons Plugin is related to the lack of measures taken to neutralize special elements used in the operating system command line. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2022-0323

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

CVE-2022-0323: Improper Neutralization of Special Elements Used in a Template Engine

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1...

CVE-2022-0258

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

WebKitGTK WPE WebKit Data Compromise

The vulnerability of elements in iframe modules for displaying web pages in WebKitGTK and WPE WebKit is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through malicious web content...

PT-2022-13076

Name of the Vulnerable Software and Affected Versions pimcore affected versions not specified Description The issue is related to Improper Neutralization of Special Elements used in an SQL Command. This means that pimcore does not properly handle special elements in SQL commands, which could lead...

Zoho ManageEngine O365 Manager Plus Remote Code Execution Vulnerability

A security vulnerability exists in Zoho ManageEngine O365 Manager Plus, a software for auditing, monitoring and managing Office 365 from ZOHO, Inc. prior to Build 4416, which stems from an external input data during the construction of a code segment, and the network system or product fails to...

CVE-2022-0224

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

CVE-2022-0224: Improper Neutralization of Special Elements used in an SQL Command

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

TP-Link TL-WR802N Router Command Injection

The vulnerability of TP-Link TL-WR802N router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Siemens Energy PLUSCONTROL

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Energy Equipment: PLUSCONTROL Vulnerabilities: Type Confusion, Improper Validation of Specified Quantity in Input, Buffer Access with Incorrect Length Value, Integer Underflow, Improper Handling...