CWE-140: Improper Neutralization of Delimiters
The product does not neutralize or incorrectly neutralizes delimiters.
A kind of CWE-138 Improper Neutralization of Special Elements.
From the CWE List. © The MITRE Corporation.
Newest
- unrealircd The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label"... 8.6 High
- ericlbuehler mistral.rs mistral.rs before 0.9.5 Tool Call Injection via mistralrs-core Output Parsers 2.3 Low
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: information disclosure via query injection in entra id lookups 5.3 Medium
- vim, red hat enterprise linux 10, enterprise linux 10.0 extended update support +9 more +11 more Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name 7.3 High
- checkmk Potential livestatus injection in prediction graph page 5.3 Medium
- checkmk Potential livestatus injection in notification test 5.1 Medium
- checkmk Livestatus injection in monitoring quicksearch 5.3 Medium
- color iccdev iccDEV has Type Confusion in CIccTag:IsTypeCompressed() 5.4 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration 6.8 Medium
- checkmk Livestatus injection in autocomplete endpoint 5.3 Medium
- octoprint OctoPrint Vulnerable to Denial of Service through malformed HTTP request 6.5 Medium
- nagvis Livestatus Injection in dynmaps 5.3 Medium
- asterisk, sangoma certified asterisk +1 more Using malformed From header can forge identity with ";" or NULL in name portion 7.7 High
- checkmk Livestatus command injection in RestAPI 6.0 Medium
- cesanta mongoose, mongoose web server, siemens reyrolle 7sr5 +2 more Improper Neutralization of Delimiters in Mongoose Web Server library 4.0 Medium
- cesanta mongoose, mongoose web server, siemens reyrolle 7sr5 +2 more Improper Neutralization of Delimiters in Mongoose Web Server library 4.0 Medium
- fish-shop syntax-check fish-shop/syntax-check Improper Neutralization of Delimiters 4.8 Medium
- checkmk Livestatus injection in mknotifyd 6.5 Medium
- checkmk Livestatus injection in ajax_search 7.6 High
- checkmk Livestatus injection in availability timeline 7.6 High
- getkirby kirby Kirby vulnerable to field injection in the KirbyData text storage handler 7.1 High
- checkmk Livestatus command injection in RestAPI 8.3 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 more fast-uri vulnerable to host confusion via percent-encoded authority delimiters 7.5 High