CWE-172: Improper Encoding or Decoding of Data
The product does not properly encode or decode data, resulting in unexpected values that are not equivalent to the original data.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- fast-uri fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding 6.1 Medium
- f5 nginx open source, nginx plus +1 more NGINX ngx_http_v3_module vulnerability 6.9 Medium
- corazawaf coraza OWASP Coraza WAF: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass 5.8 Medium
- vmware rabbitmq java client, com.rabbitmq amqp-client, rabbitmq rabbitmq-java-client +2 more RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers 6.0 Medium
- trusted domain project opendmarc Trusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error 6.9 Medium
- fast-uri fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization 4.8 Medium
- sensiolabs symfony, cloud foundry routing +1 more Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization 5.1 Medium
- f5 nginx open source, nginx gateway fabric, nginx ingress controller +1 more +3 more NGINX ngx_http_proxy_v2_module vulnerability 6.3 Medium
- validator project validator Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements 8.7 High
- squid-cache squid Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in... 4.0 Medium
- owasp-modsecurity modsecurity Libmodsecurity3 has possible bypass of encoded HTML entities 7.9 High
- authzed spicedb SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not 2.0 Low
-
gix-attributescrates.io The kstring integration in gix-attributes is unsound No score -
com.vaadin:flow-serverMaven Reflected cross-site scripting in development mode handler in Vaadin 2.5 Low - flow flow-server, vaadin +1 more Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19 2.5 Low
- abi stable project stable Update unsound DrainFilter and RString::retain 7.5 High
- abi stable project stable Update unsound DrainFilter and RString::retain 7.5 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 more Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability 7.7 High
- clusterlabs fence-agents, redhat enterprise linux, enterprise linux server +1 more +3 more A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters... 5.0 Medium
- python, canonical ubuntu linux, debian linux +14 more +16 more A security regression of CVE-2019-9636 was discovered in python since commit... 9.8 Critical
- restforce, https://github.com/restforce restforce ruby gem +1 more restforce vulnerable to Improper Input Validation 9.8 Critical
- sap j2ee engine server core, netweaver java web container and http service engine, sap se netweaver application server (engine api) +1 more +3 more SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7... 4.7 Medium
- teclib-edition armadito antivirus An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2.... 3.3 Low
- xpdfreader xpdf A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of... 5.5 Medium
- google android service/jni/com_android_server_wifi_Gbk2Utf.cpp in the Qualcomm Wi-Fi gbk2utf module in Android... 9.8 Critical
- google android The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain... 5.5 Medium
- google android decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and... 5.5 Medium
- google android codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01... 5.5 Medium