# CWE-116.

Every Advisory and CVE whose sources give the weakness CWE-116, newest first.

## Records, newest first (an older page)

- [Log injection in uvicorn](https://agentprime.io/advisories/GHSA-33c7-2mpw-hg34.md)
  `GHSA-33c7-2mpw-hg34`, `CVE-2020-7694`, `PYSEC-2020-150`, `SNYK-PYTHON-UVICORN-575560` · PyPI `uvicorn`: affected `<0.11.7`, fixed in `0.11.7` · CVSS 3.7 Low · Not analysed yet · Published 29 Jul 2020 · Tags: Code injection, CWE-116
- [Insufficient output escaping of attachment names in PHPMailer](https://agentprime.io/advisories/GHSA-f7hx-fqxw-rvvj.md)
  `GHSA-f7hx-fqxw-rvvj`, `BIT-phpmailer-2020-13625`, `CVE-2020-13625`, `PKSA-8sw7-9x88-c8bx` · Packagist `phpmailer/phpmailer`: affected `<6.1.6`, fixed in `6.1.6` · CVSS 7.5 High · Not analysed yet · Published 27 May 2020 · Tags: CWE-116
- [Improper Input Validation in Symfony](https://agentprime.io/advisories/GHSA-w4rc-rx25-8m86.md)
  `GHSA-w4rc-rx25-8m86`, `CVE-2019-11325`, `PKSA-3wg8-7y1s-53jj`, `PKSA-qdcz-9b22-7g4s` · Packagist `symfony/symfony` and 1 more: affected `>=4.2.0, <4.2.12 || >=4.3.0, <4.3.8`, fixed in `4.2.12`, `4.3.8` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Feb 2020 · Tags: CWE-116
- [Insert tag injection in the Contao login module](https://agentprime.io/advisories/GHSA-jc43-qrrp-98f5.md)
  `GHSA-jc43-qrrp-98f5`, `CVE-2019-19714`, `PKSA-hg6f-pdnr-w5hp`, `PKSA-jvc9-sf8h-c99f` · Packagist `contao/contao` and 1 more: affected `>=4.8.4, <4.8.6`, fixed in `4.8.6` · CVSS 5.3 Medium · Not analysed yet · Published 17 Dec 2019 · Tags: CWE-116
- [Improper Encoding or Escaping of Output and Injection in LibreNMS](https://agentprime.io/advisories/GHSA-w5r2-gvgf-mpm8.md)
  `GHSA-w5r2-gvgf-mpm8`, `CVE-2019-12463`, `PKSA-r9vb-9wpz-2w8m` · Packagist `librenms/librenms`: affected `>=1.50.1, <1.53`, fixed in `1.53` · CVSS 8.8 High · Not analysed yet · Published 11 Oct 2019 · Tags: Other injection, CWE-116
- [Insufficient URL decoding flaw in categorizing macro location](https://agentprime.io/advisories/CVE-2019-9853.md)
  `CVE-2019-9853` · CVE record: Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 27 Sept 2019 · Tags: CWE-116
- [Insufficient URL encoding flaw in allowed script location check](https://agentprime.io/advisories/CVE-2019-9852.md)
  `CVE-2019-9852` · CVE record: Document Foundation LibreOffice · No CVSS score · Not analysed yet · Published 15 Aug 2019 · Tags: CWE-116
- [Improper output encoding in Facebook WhatsApp Desktop](https://agentprime.io/advisories/CVE-2019-3571.md)
  `CVE-2019-3571` · CVE record: Facebook WhatsApp Desktop · No CVSS score · Not analysed yet · Published 16 Jul 2019 · Tags: CWE-116
- [An issue was discovered in OpenSSH 7.9.](https://agentprime.io/advisories/CVE-2019-6109.md)
  `CVE-2019-6109` · CVE record · CVSS 6.8 Medium · Not analysed yet · Published 31 Jan 2019 · Tags: CWE-116
- [Improper output encoding in Synology DiskStation Manager (DSM)](https://agentprime.io/advisories/CVE-2018-8920.md)
  `CVE-2018-8920` · CVE record: Synology DiskStation Manager (DSM) · CVSS 5.9 Medium · Not analysed yet · Published 24 Dec 2018 · Tags: CWE-116
- [dojox vulnerable to unescaped string injection](https://agentprime.io/advisories/GHSA-84cm-x2q5-8225.md)
  `GHSA-84cm-x2q5-8225`, `CVE-2018-15494` · npm `dojox`: affected `<1.14.0`, fixed in `1.14.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2018 · Tags: CWE-116

Newest: <https://agentprime.io/advisories/tag/cwe-116.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-116&cursor=WyIyMDIwLTExLTE4VDIxOjE5OjE0LjAwMDAwMFoiLCJHSFNBLXIyajYtcDY3aC1xNjM5Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-116/?cursor=WyIyMDIwLTExLTE4VDIxOjE5OjE0LjAwMDAwMFoiLCJHSFNBLXIyajYtcDY3aC1xNjM5Il0>. Everything for agents: <https://agentprime.io/llms.txt>.