CWE-349: Acceptance of Extraneous Untrusted Data With Trusted Data
The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- aio-libs aiosmtpdSTARTTLS unencrypted commands injection5.4 Medium
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...3.7 Low
- checkmkArgument injection to runmqsc6.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode...6.3 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +101 more +103 moreA vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...8.6 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle: cache poisoning risk with endpoint revision numbers3.3 Low
- asyncssh project asyncsshAsyncSSH Rogue Session Attack6.8 Medium
- asyncssh project asyncsshAsyncSSH Rogue Extension Negotiation5.9 Medium
- johnsoncontrols videoedgeVideoEdge config7.1 High
- nim-lang nim, embysupport security +1 moreNimble fails to validate certificates due to insecure httpClient defaults8.1 High
- opensuse openldap2, leap 15.1, leap 15.2 +19 more +21 moreLocal privilege escalation from ldap to root when using OPENLDAP_CONFIG_BACKEND=ldap in openldap27.7 High
- kernel selinux, linux kernel, redhat enterprise linux server +2 moreA flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where...6.1 Medium
- iterm2iTerm2, up to and including version 3.3.5, with tmux integration is vulnerable to remote command execution9.8 Critical
- sensiolabs symfony, debian linux, drupal +2 moreSymfony HTTP Foundation web cache poisoning6.5 Medium
- infinispan, redhat jboss data grid +1 moreDeserialization of Untrusted Data in Infinispan8.8 High
- djangoproject django, canonical ubuntu linux +1 moreDjango Vulnerable to Cache Poisoning6.4 Medium
- djangoproject djangoDjango Vulnerable to Cache Poisoning5.0 Medium