CVE-2022-22817

A flaw was found in python-pillow. The vulnerability occurs due to Improper Neutralization, leading to command injection. This flaw allows an attacker to externally-influenced input commands that modify the intended command...

CVE-2022-0258

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

CVE-2022-0257 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2022-0258 SQL Injection in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

CVE-2022-0258

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

CVE-2022-0253

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

PT-2022-13071

Name of the Vulnerable Software and Affected Versions livehelperchat affected versions not specified Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly validate user...

PT-2022-10739

Name of the Vulnerable Software and Affected Versions chaskiq affected versions not specified Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software fails to properly neutralize user input,...

PT-2022-10743

Name of the Vulnerable Software and Affected Versions icecoder affected versions not specified Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software fails to properly neutralize user input,...

PT-2022-13076

Name of the Vulnerable Software and Affected Versions pimcore affected versions not specified Description The issue is related to Improper Neutralization of Special Elements used in an SQL Command. This means that pimcore does not properly handle special elements in SQL commands, which could lead...

CVE-2021-42357: Improper Neutralization of Input During Web Page Generation

When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be...

UBUNTU-CVE-2022-0224

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

CVE-2022-0224 SQL Injection in dolibarr/dolibarr

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

CVE-2022-0224

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

PT-2022-13044 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: dolibarr affected versions not specified Description: The issue is related to Improper Neutralization of Special Elements used in an SQL Command. This means that the software does not properly handle special characters in SQL commands, which...

CVE-2022-22529: Improper Neutralization of Input During Web Page Generation

SAP Enterprise Threat Detection ETD - version 2.0, does not sufficiently encode user-controlled inputs which may lead to an unauthorized attacker possibly exploit XSS vulnerability. The UIs in ETD are using SAP UI5 standard controls, the UI5 framework provides automated output encoding for its...

CVE-2022-0224: Improper Neutralization of Special Elements used in an SQL Command

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

Cross site scripting

orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

PT-2022-13001

Name of the Vulnerable Software and Affected Versions OrchardCore affected versions not specified Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software fails to properly neutralize user...

CVE-2022-20617: Improper Neutralization of Special Elements used in an OS Command

Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able to control the contents of a previously configured job's SCM repository...