CWE-86: Improper Neutralization of Invalid Characters in Identifiers in Web Pages
The product does not neutralize or incorrectly neutralizes invalid characters or byte sequences in the middle of tag names, URI schemes, and other identifiers.
A kind of CWE-79 Cross-site Scripting.
From the CWE List. © The MITRE Corporation.
Newest
- thephpleague commonmark League CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypass 5.3 Medium
- thephpleague commonmark league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes 6.1 Medium
- vim Vim has OS Command Injection in netrw 4.4 Medium
- yokogawa electric corporation fast/tools, yokogawa fast\/tools +1 more A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This... 2.1 Low
- cisco common services platform collector, common services platform collector software, crosswork network controller +2 more Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability 5.4 Medium
- cisco common services platform collector, common services platform collector software, crosswork network controller +2 more Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability 5.4 Medium
- cisco common services platform collector, common services platform collector software, crosswork network controller +2 more Cisco Common Services Platform Collector Cross-Site Scripting Vulnerability 5.4 Medium
- mozilla firefox A malicious website could have included an iframe with an malformed URI resulting in a non... 6.5 Medium
- apache traffic server Apache Traffic Server: Incomplete field name check allows request smuggling 7.5 High
- intel arc a graphics, iris xe graphics +1 more Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31... 7.8 High
- intel ethernet adapter complete driver, ethernet controller i225-it firmware, ethernet controller i225-lm firmware +1 more +3 more Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via lo… 7.2 High
- xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability 9.1 Critical
- fedoraproject fedora, intel onevpl gpu runtime +1 more Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5... 3.3 Low
- xwiki, xwiki xwiki-commons +1 more Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml 9.1 Critical