CWE-75.

Duplicate Advisory: Untrusted Query Object Evaluation in RPC API

• CWE-75

* · no fixed version yet

Langroid: handle_message() executes user-supplied tool JSON without sender verification

• Other injection
• CWE-75

<0.65.3 · fixed in 0.65.3

Apache APISIX: forward auth plugin allows header injection

• Apache Software Foundation Apache APISIX
• CWE-75

Nuclio Shell Runtime Command Injection Leading to Privilege Escalation

• CWE-75

<1.15.20 · fixed in 1.15.20

Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster

• vapor leaf-kit
• Cross-site scripting (XSS)
• CWE-75

Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter.

• Other injection
• CWE-75

python-ldap has sanitization bypass in ldap.filter.escape_filter_chars

• Memory corruption
• CWE-75

<3.4.5 · fixed in 3.4.5

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake.

• CWE-75

<6.4.0 · fixed in 6.4.0

Calculated Fields Form <= 5.2.45 - HTML Injection

• codepeople Calculated Fields Form
• CWE-75

WoodWing Elvis DAM v6.98.1 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the Apache Ant script functionality.

• Code injection
• CWE-75

Untrusted Query Object Evaluation in RPC API

• CWE-75

<1.5.5 || >=2.0.0-beta.1, <2.0.0-beta.3 · fixed in 1.5.5, 2.0.0-beta.3

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3…

• CWE-75

An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script to the csl/user component.

• CWE-75

An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save.

• CWE-75

Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php.

• CWE-75

In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig.

• CWE-75

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName parameter in the setUpgradeFW function.

• CWE-75

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a Denial-of-Service (DoS) vulnerability in the RebootSystem function which can reboot the system without authorization.

• CWE-75

Winter CMS Server-Side Template Injection (SSTI) vulnerability

• CWE-75
• CWE-97

<=1.2.3 · no fixed version yet

Black vulnerable to Regular Expression Denial of Service (ReDoS)

• Denial of service
• CWE-75

<24.3.0 · fixed in 24.3.0

Unauthenticated DoS in Arcserve Unified Data Protection

• Arcserve Unified Data Protection
• CWE-75

In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation.

• Google Android
• CWE-75

An injection issue was addressed with improved input validation.

• Apple macOS
• CWE-75

An injection issue was addressed with improved input validation.

• Apple macOS
• CWE-75

A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21.

• Code injection
• CWE-75

Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri

• Cross-site scripting (XSS)
• CWE-75

<23.0.3 · fixed in 23.0.3

Duplicate Advisory: Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri

• CWE-75

<23.0.3 · fixed in 23.0.3

Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService

• CWE-20
• CWE-75

<=1.4 · no fixed version yet

thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter

• Cross-site scripting (XSS)
• CWE-75

<3.1.12 · fixed in 3.1.12

A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during serve…

• https://github.com/curl/curl
• CWE-75

Code injection in Ubiquiti EdgeRouter(s) and USG(s)

• Ubiquiti EdgeRouter(s) and USG(s)
• Code injection
• CWE-75

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2

• radareorg/radare2
• CWE-75

The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior.

• CWE-75

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.

• CWE-75

<2.5.5 · fixed in 2.5.5

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.

• CWE-75

<1.8.3 · fixed in 1.8.3

Siemens Desigo PXC4: A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884)…

• Siemens Desigo PXC4
• Siemens Desigo PXC5
• CWE-75

Code injection in plupload

• Unrestricted file upload
• CWE-75

<2.3.9 · fixed in 2.3.9

Cachet configuration leak

• CWE-75

<2.5.1 · fixed in 2.5.1

Special Element Injection in notebook

• Cross-site scripting (XSS)
• CWE-75

<5.7.11 || >=6.0.0, <6.4.1 · fixed in 5.7.11, 6.4.1

JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>

• Cross-site scripting (XSS)
• CWE-75

<1.2.21 || >=2.0.0a0, <2.2.10 || >=2.3.0a0, <2.3.2 || >=3.0.0a0, <3.0.17 || >=3.1.0a0, <3.1.4 · fixed in 1.2.21, 2.2.10, 2.3.2, 3.0.17, 3.1.4

Rocket.Chat server: A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4…

• Rocket.Chat server
• CWE-75

Rocket.Chat server: A improper input sanitization vulnerability exists in Rocket.Chat server 3.11…

• Rocket.Chat server
• CWE-75

Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection.

• Revive Adserver All versions before 3.2.5 and 4.0.0
• CWE-75