CWE-158: Improper Neutralization of Null Byte or NUL Character
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes NUL characters or null bytes when they are sent to a downstream component.
A kind of CWE-138 Improper Neutralization of Special Elements.
From the CWE List. © The MITRE Corporation.
Newest
- automattic mongoose Mongoose: Heap OOB reads and null-byte bypass in mg_path_is_sane (util.c) 6.5 Medium
- webpros cpanel Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account... 8.7 High
- python software foundation cpython socket.getaddrinfo() accepts embedded null bytes in host and port 5.3 Medium
- randombit botan Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs 4.8 Medium
- openvpn OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a... 7.6 High
- typesettingtools aegisub Aegisub executes arbitrary code through automatically loaded Automation scripts 7.8 High
- apache log4net Apache log4net: NUL character truncates OutputDebugStringAppender records 5.3 Medium
- apache log4net Apache log4net: NUL character truncates EventLogAppender records 5.3 Medium
- fortinet fortimail An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability... 9.8 Critical
- splunk, splunk enterprise +1 more Path Traversal through Search Head Clustering in Splunk Enterprise 8.1 High
- electron Electron: shell.openPath path validation bypass via embedded null byte 6.0 Medium
- envoyproxy envoy Envoy: Embedded NUL in TLS DNS SAN Truncation in the Default TLS Certificate Validator. (Auth Bypass) 4.4 Medium
- jqlang jq jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts 4.4 Medium
- jqlang jq jq: Embedded NUL truncates top-level jq programs loaded with -f 5.5 Medium
- mutt mutt before 2.3.2 does not check for '\0' in url_pct_decode. 3.7 Low
- mutt mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest. 3.7 Low
- whatsapp, facebook whatsapp desktop for windows +1 more An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could... 6.5 Medium
- free5gc, free5gc udm +1 more free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error 8.7 High
- mongodb c driver Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer 2.0 Low
- huawei harmonyos Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this... 4.0 Medium
- kiboit phastpress PhastPress <= 3.7 - Unauthenticated Arbitrary File Read via Null Byte Injection 9.8 Critical
- db electronica telecomunicazioni s.p.a. mozart fm transmitter, dbbroadcast mozart dds next 1000 firmware, mozart dds next 100 firmware +20 more +22 more Unauthenticated Arbitrary File Read via Null Byte Injection 8.9 High
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to... 3.6 Low
- civetweb Denial of Service in CivetWeb 8.7 High
- bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent unescaped NULL byte in access control list checks 9.5 Critical
- wftpserver wing ftp server, wing ftp server ftp server +1 more In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes,... 10.0 Critical
- mozilla firefox, thunderbird +1 more Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents 7.3 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 more Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server 6.8 Medium
- php PHP-FPM logs from children may be altered 3.3 Low
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +13 more +15 more Xorg-x11-server: selinux unlabeled glx pbuffer 5.5 Medium
- red lion crimson Red Lion Crimson Improper Neutralization of Null Byte or NUL Character 8.8 High
- go standard library os/exec, syscall, golang go +2 more Unsanitized NUL in environment variables on Windows in syscall and os/exec 7.5 High
- dell chengming 3900 firmware, cpg bios, inspiron 14 plus 7420 firmware +23 more +25 more Dell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local... 2.3 Low
- atlassian bitbucket, bitbucket server, bitbucket server and data center +1 more +3 more Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17,... 8.8 High
- cisco expressway, telepresence video communication server, telepresence video communication server (vcs) expressway +2 more Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities 9.0 Critical
- cisco expressway, telepresence video communication server, telepresence video communication server (vcs) expressway +2 more Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities 9.0 Critical
- sophos firewall, sfos +1 more An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker... 9.8 Critical
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 more Improper neutralization of null byte leads to read overrun 6.5 Medium
- secomea gatemanager all versions prior to 9.2c gatemanager all versions prior to 9.2c, secomea gatemanager 8250 firmware +1 more IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158 10.0 Critical
- dell client consumer and commercial platforms, latitude 5300 2-in-1 firmware, latitude 5300 firmware +16 more +18 more Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin... 8.6 High
- microsoft directx, windows 2000, windows server 2003 +2 more +4 more Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in... 9.3 High