Advisories · Weakness
CWE-235.
Every Advisory and CVE whose sources give the weakness CWE-235, newest first.
-
Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling
- Path traversal
- Information disclosure
<3.3.0 · fixed in 3.3.0
GHSA-92hr-gmr6-h8cp - CVSS 7.4 High
SQL injection in Open-Xchange GmbH OX Dovecot Pro
- Open-Xchange GmbH OX Dovecot Pro
- SQL injection
- CWE-235
- CVSS 6.5 Medium
Cisco IOS XE Software: A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software…
- Cisco IOS XE Software
- CWE-235
- CVSS 7.1 High
Parameter Pollution Vulnerability
- Shilpi Computers Client Dashboard
- CWE-235
- CVSS 6.3 Medium
express-param vulnerable to Improper Handling of Extra Parameters
- CWE-235
<1.0.0 · fixed in 1.0.0
GHSA-fr54-72wr-cqvq · CVE-2017-20160