CWE-790.

Potential wildcard CNAME RPZ policy bypass

• ISC BIND 9
• CWE-790

Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths

• RRWO Plack::Middleware::Security::Common
• Other injection
• CWE-790

Backend Access Due to Insufficient Input Validation

• WAGO Device Sphere
• WAGO Solution Builder
• CWE-790

Ericsson Indoor Connect 8855 - Improper Filtering of Special Elements Vulnerability

• Ericsson Indoor Connect 8855
• CWE-790

Jail chroot escape via fd exchange with a different jail

• FreeBSD
• Privilege escalation
• CWE-488

Enterprise Protection Backslash URL Rewrite Bypass

• Proofpoint Enterprise Protection
• CWE-790

Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability.

• Dell RecoverPoint for Virtual Machines
• CWE-790

Multiple issues in ctl(4) CAM Target Layer

• FreeBSD
• CWE-790
• CWE-823

Stored XSS in process management

• OTRS
• OTRS AG ((OTRS)) Community Edition
• CWE-790

Stored XSS in System Configuration

• OTRS
• OTRS AG ((OTRS)) Community Edition
• Cross-site scripting (XSS)
• CWE-790

Information exlosure in external interface

• OTRS
• CWE-790

An issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version RSR10-01G-T-S_RSR_3.0(1)B9P2, Release(07150910) allows attackers to execute arbitrary code via the co…

• CWE-790

Meta tac_plus: A lack of input validation exists in tac_plus prior to commit 4fdf178 which…

• Meta tac_plus
• CWE-790

Sequelize - Default support for “raw attributes” when using parentheses

• CWE-790

<6.29.0 · fixed in 6.29.0

Duplicate advisory: Sequelize vulnerable to Improper Filtering of Special Elements

• CWE-790

<6.29.0 · fixed in 6.29.0

Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports

• etherpad-lite
• CWE-790
• CWE-1287