CWE-159: Improper Handling of Invalid Use of Special Elements
The product does not properly filter, remove, quote, or otherwise manage the invalid use of special elements in user-controlled input, which could cause adverse effect on its behavior and integrity.
A kind of CWE-138 Improper Neutralization of Special Elements.
From the CWE List. © The MITRE Corporation.
Newest
- suitecrm SuiteCRM has blind XSS in return_id parameter 5.9 Medium
- tornadoweb tornado Tornado has incomplete validation of cookie attributes 7.2 High
- microsoft windows os Denial of Service in Microsoft OS 5.5 Medium
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain... 3.6 Low
- risc0 risc0-ethereum risc0-ethereum-contracts allows invalid commitment with digest value of zero to be accepted by Steel.validateCommitment 1.7 Low
- meshtastic firmware Failure to check for packets from the broadcast address allows potential DDoS amplification attack in Meshtastic firmware 5.3 Medium
- php, debian linux, netapp clustered data ontap +1 more +3 more Special characters break path parsing in XML functions 5.3 Medium
- busybox, fedoraproject fedora, netapp cloud backup +9 more +11 more An incorrect handling of a special element in Busybox's ash applet leads to denial of service... 5.5 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 more Host Header Injection allowing web cache poisoning attacks 5.3 Medium
- juniper junos, juniper networks junos os +1 more Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak 7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet 7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information. 7.5 High
- printerlogic management software, print management +1 more PrinterLogic Print Management Software does not sanitize special characters 9.8 Critical