CWE-141: Improper Neutralization of Parameter/Argument Delimiters

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as parameter or argument delimiters when they are sent to a downstream component.

A kind of CWE-140 Improper Neutralization of Delimiters.

From the CWE List. © The MITRE Corporation.

Newest

• microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 more Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2026-66323 5.4 MediumAugust 28, 2026
• snowflake python apis Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation CVE-2026-19594 8.1 HighAugust 12, 2026
• cisco unified computing system (standalone), unified computing system +1 more Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability CVE-2026-20200 Public exploit 8.8 HighAugust 5, 2026
• elixir-plug plug Cookie attribute injection in Plug.Conn.Cookies.encode/2 CVE-2026-56813 Fix available 2.1 LowJuly 10, 2026
• hikvision isecure center Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation,... CVE-2023-28815 9.8 CriticalOctober 17, 2025
• cisco ios xe software, ios xe +1 more A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker... CVE-2025-20338 6.0 MediumSeptember 24, 2025
• sap se netweaver application server abap and abap platform Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform CVE-2025-31329 6.2 MediumMay 13, 2025
• grandstream ucm series, ucm6202 firmware, ucm6204 firmware +2 more +4 more Grandstream UCM Series IP PBX HTTP Parameter Injection CVE-2024-0840 8.8 HighApril 29, 2024
• siemens sicam p850, sicam p855, sicam t +36 more +38 more A vulnerability has been identified in SICAM P850 (All versions < V3.10), SICAM P850 (All... CVE-2022-41665 9.8 CriticalOctober 11, 2022
• siemens sicam t, 7kg8500-0aa00-0aa0 firmware, 7kg8500-0aa00-2aa0 firmware +34 more +36 more A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All... CVE-2022-29873 9.3 CriticalMay 10, 2022
• siemens sicam t, 7kg8500-0aa00-0aa0 firmware, 7kg8500-0aa00-2aa0 firmware +34 more +36 more A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All... CVE-2022-29872 8.7 HighMay 10, 2022
• helpu, helpu helpu.ocx +1 more Helpu remote code execution vulnerability CVE-2020-7868 9.6 CriticalJune 29, 2021