Skip to content
BackEsc
Sign in

CWE-75 · weakness in Injection and Smuggling

Failure to Sanitize Special Elements into a Different Plane

33 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

check available
2

Every one of the 33 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Rocket.Chat <=3.13 - NoSQL InjectionCVE-2021-22911Rocket.Chat server · 95% likely
  2. Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dllCVE-2024-0801Arcserve · CVSS 7.5 · 42% likely

    Arcserve

  3. Configuration leakCVE-2021-39174fiveai · CVSS 8.8 · 5.0% likely
  4. Nuclio Shell Runtime Command Injection Leading to Privilege EscalationCVE-2026-29042nuclio · CVSS 8.9 · 2.6% likely

    Nuclio

  5. A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potential…CVE-2021-22910Rocket.Chat server · 2.3% likely
  6. A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet o…CVE-2023-27533Haxx · CVSS 9.8 · 2.2% likely
  7. A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The “addCell” JavaScript function fails…CVE-2022-24039Siemens · 2.0% likely

    Siemens

  8. A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21. This vulnerability arises from inadequate san…CVE-2024-27622Cmsmadesimple · CVSS 7.2 · 2.0% likely

    CMS Made Simple

  9. In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege wit…CVE-2024-0044Google · CVSS 7.8 · 1.5% likely

    Google

  10. Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on a Revive Adserver instance. Especially,…CVE-2016-9471Revive Adserver All versions before 3.2.5 and 4.0.0 · 1.4% likely
  11. GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1…CVE-2024-39227Gl-Inet · CVSS 9.8 · 1.2% likely

    GL.iNet

  12. Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php.CVE-2024-35373Mocodo · CVSS 9.8 · 1.2% likely
  13. TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName parameter in the setUpgradeFW function.CVE-2024-31809Totolink · CVSS 8.8 · 1.0% likely

    TOTOLINK

  14. A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dh…CVE-2023-23912Ui · CVSS 8.8 · 1.0% likely
  15. The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a ro…CVE-2022-48217CVSS 8.1 · 0.8% likely
  16. Apache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperatorCVE-2025-50213Apache Software Foundation · CVSS 9.8 · 0.8% likely

    Apache

  17. SurrealDB before 1.5.5 Query Injection via RPC APICVE-2024-58362surrealdb · CVSS 8.8 · 0.6% likely

    Surrealdb

  18. Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter.CVE-2024-27708Airc · CVSS 9.6 · 0.6% likely
  19. Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaqCVE-2023-1758thorsten · CVSS 8.9 · 0.5% likely

    Thorsten

  20. Apache APISIX: forward auth plugin allows header injectionCVE-2026-31908Apache Software Foundation · CVSS 9.1 · 0.5% likely

    Apache

  21. Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffwebCVE-2022-4721ikus060 · CVSS 6.6 · 0.5% likely

    Ikus060

  22. An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save.CVE-2024-39243Skycaiji · CVSS 9.8 · 0.5% likely
  23. Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprintCVE-2022-3607octoprint · CVSS 6 · 0.4% likely

    OctoPrint

  24. An injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to eleva…CVE-2024-23274Apple · CVSS 8.4 · 0.4% likely

    Apple

  25. An injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to eleva…CVE-2024-23268Apple · CVSS 8.4 · 0.4% likely

    Apple

  26. Calculated Fields Form <= 5.2.45 - HTML InjectionCVE-2024-9940codepeople · CVSS 5.3 · 0.4% likely

    CodePeople

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in