CWE-146: Improper Neutralization of Expression/Command Delimiters
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as expression or command delimiters when they are sent to a downstream component.
A kind of CWE-140 Improper Neutralization of Delimiters.
From the CWE List. © The MITRE Corporation.
Newest
- cisco enterprise nfv infrastructure software, unified computing system (standalone), unified computing system e-series software (ucse) +2 more +4 more Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability 6.5 Medium
- dell powerprotect data manager Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of... 4.7 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 more BIG-IP Configuration utility vulnerability 6.9 Medium
- apache commons ognl Apache Commons OGNL: Expression Injection leading to RCE 8.8 High
- cisco adaptive security appliance (asa) software, firepower threat defense software +1 more A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco... 6.0 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 more Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability 9.9 Critical
- cisco small business rv series router firmware, rv340 dual wan gigabit vpn router firmware, rv340w dual wan gigabit wireless-ac vpn router firmware +2 more +4 more Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerability 7.2 High
- cisco small business rv series router firmware, rv320 firmware, rv325 firmware +2 more Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities 7.2 High
- cisco small business rv series router firmware, rv320 firmware, rv325 firmware +2 more Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities 7.2 High
- cisco ios xe sd-wan, ios xe software +1 more Cisco IOS XE SD-WAN Software Command Injection Vulnerability 7.8 High
- freedesktop xdg-utils When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can... 7.4 High