CVE-2021-36785: Improper Neutralization of Input During Web Page Generation

The miniorangesaml aka Miniorange Saml extension before 1.4.3 for TYPO3 allows XSS...

CVE-2021-36946: Improper Neutralization of Input During Web Page Generation

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability...

PT-2021-6287

Name of the Vulnerable Software and Affected Versions Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier Magento Commerce versions 2.3.7 and earlier Description The issue is caused by an improper neutralization of special elements used in a command, allowing an attacker with admin...

Abb Base Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl all published versions enables an attacker authenticated on the local system to inject data, affecting the online view...

CVE-2021-38372: Improper Neutralization of Special Elements used in a Command

In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS...

CVE-2021-33703: Improper Neutralization of Input During Web Page Generation

Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting XSS vulnerability...

CVE-2020-36459: Improper Neutralization of Special Elements used in a Command

An issue was discovered in the dces crate through 2020-12-09 for Rust. The World type is marked as Send but lacks bounds on its EntityStore and ComponentStore...

CVE-2020-36448: Improper Neutralization of Special Elements used in a Command

An issue was discovered in the cache crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for Cache...

CVE-2020-36450: Improper Neutralization of Special Elements used in a Command

An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch...

CVE-2020-36451: Improper Neutralization of Special Elements used in a Command

An issue was discovered in the rcucell crate through 2020-11-14 for Rust. There are unconditional implementations of Send and Sync for RcuCell...

CVE-2020-36455: Improper Neutralization of Special Elements used in a Command

An issue was discovered in the slock crate through 2020-11-17 for Rust. Slock unconditionally implements Send and Sync...

CVE-2020-36456: Improper Neutralization of Special Elements used in a Command

An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell , the Send trait lacks bounds on the contained type...

CVE-2020-36461: Improper Neutralization of Special Elements used in a Command

An issue was discovered in the noisesearch crate through 2020-12-10 for Rust. There are unconditional implementations of Send and Sync for MvccRwLock...

CVE-2020-36462: Improper Neutralization of Special Elements used in a Command

An issue was discovered in the syncpool crate before 0.1.6 for Rust. There is an unconditional implementation of Send for Bucket2...

CVE-2021-37542: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity before 2020.2.3, XSS was possible...

CVE-2021-32598

An improper neutralization of CRLF sequences in HTTP headers 'HTTP Response Splitting' vulnerability In FortiManager and FortiAnalyzer GUI 7.0.0, 6.4.6 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below may allow an authenticated and remote attacker to perform an HTTP request splittin...

CVE-2021-26097

An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6 may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTT...

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in github.com/argoproj/argo-workflows...

CVE-2021-33195: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection e.g., XSS that does not conform to the RFC1035 format...

CVE-2021-23416: Improper Neutralization of Input During Web Page Generation

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...