CWE-76: Improper Neutralization of Equivalent Special Elements
The product correctly neutralizes certain special elements, but it improperly neutralizes equivalent special elements.
A kind of CWE-75 Special Element Injection.
From the CWE List. © The MITRE Corporation.
Newest
- f5 nginx gateway fabric NGINX Gateway Fabric vulnerability 8.7 High
- f5 nginx ingress controller NGINX Ingress Controller vulnerability 8.7 High
- f5 nginx gateway fabric NGF vulnerability 8.6 High
- hackingrepo dssrf-js dssrf: there a critical security bug with remove_at_symbol_in_string 8.7 High
- f5 nginx ingress controller NGINX Ingress Controller vulnerability 8.7 High
- f5 nginx gateway fabric NGINX Gateway Fabric vulnerability 8.6 High
- simple-git project simple-git, red hat logging subsystem for red hat openshift, enterprise linux 8 +4 more +6 more simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE 9.8 Critical
- parisneo lollms-webui, parisneo/lollms-webui, lollms web ui +2 more Remote Code Execution in parisneo/lollms-webui 8.4 High
- abetlen llama-cpp-python llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata 9.7 Critical
- berriai berriai/litellm, litellm +1 more Server-Side Template Injection in BerriAI/litellm 9.8 Critical
- papercut mf, ng, ng, papercut mf +2 more Reflected XSS in PaperCut NG/MF 6.3 Medium
- papercut mf, ng, ng, papercut mf +2 more Server-side resource injection in PaperCut NG/MF 7.2 High
- papercut mf, ng, ng, papercut mf +2 more Improper access controls on APIs on Linux and macOS in PaperCut NG/MF 3.1 Low
- juniper junos, juniper networks junos os +1 more Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition 6.5 Medium
- btcpayserver btcpayserver/btcpayserver, btcpay server +1 more Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver 5.7 Medium
- btcpayserver btcpayserver/btcpayserver, btcpay server +1 more Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver 5.3 Medium