CWE-158 · weakness in Injection and Smuggling
Improper Neutralization of Null Byte or NUL Character
37 CVEs · 2 exploited
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 2
Every one of the 37 is a mark on the map. Named now: 1 to 26, most at risk first.
- Wing FTP Server <= 7.4.3 - Remote Code Execution
- Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and W…
- Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- IMPROPER NEUTRALIZATION OF NULL BYTE OR NUL CHARACTER CWE-158
- Improper neutralization of null byte leads to read overrun
- Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- Unsanitized NUL in environment variables on Windows in syscall and os/exec
- Apache log4net: NUL character truncates EventLogAppender records
- Apache log4net: NUL character truncates OutputDebugStringAppender records
- Denial of Service in CivetWeb
- Red Lion Crimson Improper Neutralization of Null Byte or NUL Character
- Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server
- An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents with embedded NUL bytes in the filename…
- PHP-FPM logs from children may be altered
- PhastPress <= 3.7 - Unauthenticated Arbitrary File Read via Null Byte Injection
- Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data.
- Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents
- Path Traversal through Search Head Clustering in Splunk Enterprise
- Unauthenticated Arbitrary File Read via Null Byte Injection
- free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error
- Apache Commons Codec: NUL bytes in tree entry names cause Git/SWHID identifier collisions (GitIdentifiers class)
Apache1 article1 article this week: Apache fixes two Commons Codec flaws in version 1.23.0
- Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of…
- Xorg-x11-server: selinux unlabeled glx pbuffer
- BMC Control-M/Agent unescaped NULL byte in access control list checks
- socket.getaddrinfo() accepts embedded null bytes in host and port
- Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.