CWE-707: Improper Neutralization
The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being used when received from an upstream component, or before being sent to a downstream component.
From the CWE List. © The MITRE Corporation.
Newest
- itsourcecode human resource management systemSourceCodester Human Resource Management System getstatecity.php sql injection6.3 Medium
- jinher oaJiusi OA hntdCustomDesktopActionContent sql injection5.5 Medium
- puppycmspuppyCMS settings.php cross site scripting4.3 Medium
- book store management system project store management system, sourcecodester book store management system +1 moreSourceCodester Book Store Management System transcation.php cross site scripting3.5 Low
- book store management system project store management system, sourcecodester book store management system +1 moreSourceCodester Book Store Management System category.php cross site scripting3.5 Low
- crealogix ebics, ebics server +1 moreCrealogix EBICS ebics.aspx cross site scripting3.5 Low
- sourcecodester web-based student clearance system, web-based student clearance system project student clearance system +1 moreSourceCodester Web-Based Student Clearance System add-student.php prepare cross site scripting3.5 Low
- sourcecodester web-based student clearance system, web-based student clearance system project student clearance system +1 moreSourceCodester Web-Based Student Clearance System POST Parameter login.php sql injection5.0 Medium
- zephyr project manager, zephyr-one zephyr project manager +1 moreZephyr Project Manager REST Call cross site scripting3.5 Low
- food ordering management system project ordering management system, sourcecodester food ordering management system +1 moreSourceCodester Food Ordering Management System POST Parameter router.php sql injection6.3 Medium
- western digital sweet b library, westerndigital sweet b +1 moreAlgorithm incorrectly returning error and Invalid unreduced value written to output buffer5.3 Medium
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS6.1 Medium
- nghttp2, debian linux, fedoraproject fedora +7 more +9 moreDenial of service in nghttp23.7 Low
- wordpress, debian linux +1 moreSpecially crafted filenames in WordPress leading to XSS8.7 High
- wordpress, debian linux +1 moreCross-site scripting (XSS) in Search block in WordPress6.4 Medium
- suricata-ids suricataAn issue was discovered in Suricata 4.1.3. If the network packet does not have the right length,...7.5 High
- samsung, samsung sth-eth-250 firmware +1 moreAn exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 ...6.5 Medium