Advisories · Weakness

CWE-99.

Every Advisory and CVE whose sources give the weakness CWE-99, newest first.

CVE-2023-3517 CVE record

CVSS 8.5 High

Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')
- Hitachi Vantara Pentaho Data Integration & Analytics
- CWE-99
Not analysed yet 12 Dec 2023
apereo/phpcas Packagist

CVSS 8.0 High

phpCAS vulnerable to Service Hostname Discovery Exploitation
- CWE-99
- CWE-1287
<1.6.0 · fixed in 1.6.0

GHSA-8q72-6qq8-xv64 · CVE-2022-39369 Not analysed yet 1 Nov 2022
CVE-2022-3774 CVE record

CVSS 5.4 Medium

SourceCodester Train Scheduler App resource injection
- SourceCodester Train Scheduler App
- CWE-99
Not analysed yet 31 Oct 2022
CVE-2022-27670 CVE record

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect…
- SAP SE SAP SQL Anywhere Server
- CWE-99
Not analysed yet 12 Apr 2022
CVE-2022-1287 CVE record

CVSS 6.5 Medium

School Club Application System resource injection
- School Club Application System
- CWE-99
Not analysed yet 9 Apr 2022
CVE-2021-42360 CVE record

CVSS 7.6 High

Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 Authenticated Block Import to Stored XSS
- BrainStormForce Starter Templates — Elementor, Gutenberg & Beaver Builder Templates
- Cross-site scripting (XSS)
- Broken access control
Not analysed yet 17 Nov 2021
CVE-2021-22879 CVE record

Nextcloud Desktop Client: Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of…
- Nextcloud Desktop Client
- CWE-99
Not analysed yet 14 Apr 2021
CVE-2020-8177 CVE record

CVSS 7.8 High

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
- https://github.com/curl/curl
- CWE-99
Not analysed yet 14 Dec 2020
CVE-2020-6245 CVE record

CVSS 6.5 Medium

SAP SE SAP Business Objects Business Intelligence Platform: SAP Business Objects Business Intelligence Platform, version 4.2…
- SAP SE SAP Business Objects Business Intelligence Platform
- CWE-99
Not analysed yet 12 May 2020
org.opencastproject:base Maven

CVSS 7.7 High

Unsafe Identifiers in Opencast
- CWE-99
<7.6 || >=8.0, <8.1 · fixed in 7.6, 8.1

GHSA-w29m-fjp4-qhmq · CVE-2020-5230 Not analysed yet 30 Jan 2020
CVE-2019-1860 CVE record

CVSS 5.9 Medium

Cisco Unified Intelligence Center Remote File Injection Vulnerability
- Cisco Unified Intelligence Center
- CWE-99
Not analysed yet 16 May 2019
CVE-2019-6545 CVE record

ICS-CERT AVEVA Software, LLC InduSoft Web Studio prior to…: AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI…
- ICS-CERT AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI (formerly InTouch Machine Edition) prior to Version 2017 Update
- CWE-99
Not analysed yet 13 Feb 2019
CVE-2016-8615 CVE record

CVSS 5.3 Medium

A flaw was found in curl before version 7.51.
- curl
- CWE-99
Not analysed yet 1 Aug 2018