Advisories · Weakness
CWE-116.
Every Advisory and CVE whose sources give the weakness CWE-116, newest first.
- CVSS 3.7 Low
Log injection in uvicorn
- Code injection
- CWE-116
<0.11.7 · fixed in 0.11.7
GHSA-33c7-2mpw-hg34 · CVE-2020-7694 - CVSS 7.5 High
Insufficient output escaping of attachment names in PHPMailer
- CWE-116
<6.1.6 · fixed in 6.1.6
GHSA-f7hx-fqxw-rvvj · CVE-2020-13625 - CVSS 9.8 CriticalCritical · CVSS 9+
Improper Input Validation in Symfony
- CWE-116
>=4.2.0, <4.2.12 || >=4.3.0, <4.3.8 · fixed in 4.2.12, 4.3.8
GHSA-w4rc-rx25-8m86 · CVE-2019-11325 - CVSS 5.3 Medium
Insert tag injection in the Contao login module
- CWE-116
>=4.8.4, <4.8.6 · fixed in 4.8.6
GHSA-jc43-qrrp-98f5 · CVE-2019-19714 - CVSS 8.8 High
Improper Encoding or Escaping of Output and Injection in LibreNMS
- Other injection
- CWE-116
>=1.50.1, <1.53 · fixed in 1.53
GHSA-w5r2-gvgf-mpm8 · CVE-2019-12463 -
Insufficient URL decoding flaw in categorizing macro location
- Document Foundation LibreOffice
- CWE-116
-
Insufficient URL encoding flaw in allowed script location check
- Document Foundation LibreOffice
- CWE-116
-
Improper output encoding in Facebook WhatsApp Desktop
- Facebook WhatsApp Desktop
- CWE-116
- CVSS 6.8 Medium
An issue was discovered in OpenSSH 7.9.
- CWE-116
- CVSS 5.9 Medium
Improper output encoding in Synology DiskStation Manager (DSM)
- Synology DiskStation Manager (DSM)
- CWE-116
- CVSS 9.8 CriticalCritical · CVSS 9+
dojox vulnerable to unescaped string injection
- CWE-116
<1.14.0 · fixed in 1.14.0
GHSA-84cm-x2q5-8225 · CVE-2018-15494