CWE-150 · weakness in Injection and Smuggling
Improper Neutralization of Escape, Meta, or Control Sequences
69 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- likely to be exploited
- 2
Every one of the 69 is a mark on the map. Named now: 1 to 26, most at risk first.
- RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute t…
- Apache Tomcat: console manipulation via escape sequences in log messages
- The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands with root privileges vi…
- An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow…
- wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequ…
- A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.
- An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an attacker to login into the application wi…
- XWiki Commons may allow privilege escalation to programming rights via user's first name
- Deno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralization
- Comments in display names are incorrectly handled in net/mail
- Crayfish allows Remote Code Execution via Homarus Authorization header
- Deno interactive permission prompt spoofing via improper ANSI stripping
- Apache HTTP Server: CGI environment variable override
- ANSI escape characters in kubectl output are not being filtered
- RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.
- Apache HTTP Server: mod_ssl error log variable escaping
- Errors returned from JSON marshaling may break template escaping in html/template
- GitHub CLI: Terminal escape sequence injection in multiple `gh` commands
- RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899.
- Mutagen list and monitor operations do not neutralize control characters in text controlled by remote endpoints
- Python-sql: python-sql unary operators does not escape non-expression
- IBM MQ code execution
- Shescape on Windows escaping may be bypassed in threaded context
- Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata
- Active Record logging vulnerable to ANSI escape injection
- Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.