Skip to content
BackEsc
Sign in

CWE-116 · weakness in Injection and Smuggling

Improper Encoding or Escaping of Output

389 CVEs · 4 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
4
check available
5
likely to be exploited
10

Every one of the 389 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Sonicwall - Pre-Authentication Arbitrary File ReadCVE-2024-38475Apache Software Foundation · CVSS 9.1 · 100% likely

    Apache

  2. Zimbra Collaboration Suite < 8.8.15 - Improper EncodingCVE-2022-24682Synacor · CVSS 6.1 · 31% likely

    Zimbra

  3. Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation VulnerabilityCVE-2026-20245Cisco · CVSS 7.8 · 25% likelycovered by CyberSIXT

    Cisco

  4. Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely execute code in the…CVE-2022-42948Fortra · CVSS 9.8 · 2.7% likely

    Fortra

  5. Webmin <1.997 - Authenticated Remote Code ExecutionCVE-2022-3644696% likely
  6. Apache HTTP Server - ACL BypassCVE-2024-38473Apache Software Foundation · CVSS 8.1 · 26% likely

    Apache

  7. ExponentCMS <= 2.6 - Host Header InjectionCVE-2021-387512.5% likely
  8. WordPress GDPR & CCPA <1.9.27 - Cross-Site ScriptingCVE-2022-0220WordPress GDPR · 2.3% likely
  9. GTranslate < 2.8.65 - Cross-Site ScriptingCVE-2021-34630Translate AI Multilingual Solutions · CVSS 5 · 1.6% likely
  10. An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a Denial of Service attack (against all clients using the pr…CVE-2021-3180695% likely
  11. Gitea before 1.16.7 does not escape git fetch remote.CVE-2022-3078188% likely
  12. An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response header over HTTP or HTTPS, there is a denial of service. This he…CVE-2021-2866272% likely
  13. XWiki Platform vulnerable to RXSS via editor parameter - importinline templateCVE-2023-32071xwiki · CVSS 9.1 · 70% likely

    Xwiki

  14. nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.CVE-2013-454768% likely
  15. Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename extension-blocking protection mechanism, and potentially…CVE-2024-39929Exim · CVSS 5.4 · 41% likely

    Exim

  16. Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-…CVE-2024-50629Synology · CVSS 5.3 · 35% likelycovered by CyberSIXT

    Synology2 articles

  17. Command injection via array-ish $command parameter of proc_open()CVE-2024-1874PHP Group · CVSS 9.4 · 33% likely

    PHP

  18. Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)CVE-2024-5585PHP Group · CVSS 7.7 · 29% likely

    PHP

  19. An issue was discovered on Accellion FTA devices before FTA_9_12_180. seos/1000/find.api allows Remote Code Execution with shell metacharacters in the method parameter.CVE-2017-830324% likely
  20. A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics serv…CVE-2018-8609Microsoft · 9.9% likely

    Microsoft

  21. Auth weakness in JNDIRealmCVE-2021-30640Apache Software Foundation · 9.9% likely

    Apache

  22. mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via APICVE-2026-40871mailcow · CVSS 7.2 · 8.6% likely

    Mailcow

  23. An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to…CVE-2019-0971Microsoft · 8.5% likely

    Microsoft

  24. WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of…CVE-2013-2011Super Cache Plugin · 7.1% likely
  25. An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'M…CVE-2019-0956Microsoft · 5.2% likely

    Microsoft

  26. xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.CVE-2022-25235CVSS 9.8 · 5.0% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in