CWE-116 · Injection and Smuggling
Improper Encoding or Escaping of Output
389CVEs
4exploited
5with a public check
10likely (EPSS 10%+)
SortMost likely exploited
389 CVEs with CWE-116 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-38475In CISA KEVExploitedSonicwall - Pre-Authentication Arbitrary File ReadApache Software Foundation · Apache HTTP Server · CVSS 9.1 · 2024-07-01 | 9.1 | 100% | 2024-07-01 |
| CVE-2022-24682In CISA KEVExploitedZimbra Collaboration Suite < 8.8.15 - Improper EncodingSynacor · Zimbra Collaborate Suite (ZCS) · CVSS 6.1 · 2022-02-09 | 6.1 | 31% | 2022-02-09 |
| CVE-2026-20245In CISA KEVExploitedCisco Catalyst SD-WAN Controller Authenticated Privilege Escalation VulnerabilityCisco · Cisco Catalyst SD-WAN Controller · CVSS 7.8 · 2026-06-04 | 7.8 | 25% | 2026-06-04 |
| CVE-2022-42948In CISA KEVExploitedCobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely execute code in the…Fortra · Cobalt Strike · CVSS 9.8 · 2023-03-24 | 9.8 | 2.7% | 2023-03-24 |
| CVE-2022-36446CheckWebmin <1.997 - Authenticated Remote Code ExecutionWebmin · Webmin · 2022-07-25 | – | 96% | 2022-07-25 |
| CVE-2024-38473CheckApache HTTP Server - ACL BypassApache Software Foundation · Apache HTTP Server · CVSS 8.1 · 2024-07-01 | 8.1 | 26% | 2024-07-01 |
| CVE-2021-38751CheckExponentCMS <= 2.6 - Host Header InjectionExponentcms · Exponentcms · 2021-08-16 | – | 2.5% | 2021-08-16 |
| CVE-2022-0220CheckWordPress GDPR & CCPA <1.9.27 - Cross-Site ScriptingWelaunch · WordPress GDPR · 2022-02-01 | – | 2.3% | 2022-02-01 |
| CVE-2021-34630CheckGTranslate < 2.8.65 - Cross-Site ScriptingTranslate AI Multilingual Solutions · GTranslate Pro and GTranslate Enterprise · CVSS 5 · 2021-07-30 | 5.0 | 1.6% | 2021-07-30 |
| CVE-2021-31806An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a Denial of Service attack (against all clients using the pr…Squid-Cache · Squid · 2021-05-27 | – | 95% | 2021-05-27 |
| CVE-2022-30781Gitea before 1.16.7 does not escape git fetch remote.Gitea · Gitea · 2022-05-16 | – | 88% | 2022-05-16 |
| CVE-2021-28662An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response header over HTTP or HTTPS, there is a denial of service. This he…Squid-Cache · Squid · 2021-05-27 | – | 72% | 2021-05-27 |
| CVE-2023-32071XWiki Platform vulnerable to RXSS via editor parameter - importinline templatexwiki · xwiki-platform · CVSS 9.1 · 2023-05-09 | 9.1 | 70% | 2023-05-09 |
| CVE-2013-4547nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.F5 · Nginx · 2013-11-23 | – | 68% | 2013-11-23 |
| CVE-2024-39929Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename extension-blocking protection mechanism, and potentially…Exim · Exim · CVSS 5.4 · 2024-07-04 | 5.4 | 41% | 2024-07-04 |
| CVE-2024-50629Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-…Synology · DiskStation Manager (DSM) · CVSS 5.3 · 2025-03-19 | 5.3 | 35% | 2025-03-19 |
| CVE-2024-1874Command injection via array-ish $command parameter of proc_open()PHP Group · PHP · CVSS 9.4 · 2024-04-29 | 9.4 | 33% | 2024-04-29 |
| CVE-2024-5585Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)PHP Group · PHP · CVSS 7.7 · 2024-06-09 | 7.7 | 29% | 2024-06-09 |
| CVE-2017-8303An issue was discovered on Accellion FTA devices before FTA_9_12_180. seos/1000/find.api allows Remote Code Execution with shell metacharacters in the method parameter.Accellion · File Transfer Appliance · 2017-05-05 | – | 24% | 2017-05-05 |
| CVE-2018-8609A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics serv…Microsoft · Microsoft Dynamics 365 · 2018-11-14 | – | 9.9% | 2018-11-14 |
| CVE-2021-30640Auth weakness in JNDIRealmApache Software Foundation · Apache Tomcat · 2021-07-12 | – | 9.9% | 2021-07-12 |
| CVE-2026-40871mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via APImailcow · mailcow-dockerized · CVSS 7.2 · 2026-04-21 | 7.2 | 8.6% | 2026-04-21 |
| CVE-2019-0971An information disclosure vulnerability exists when Azure DevOps Server and Microsoft Team Foundation Server do not properly sanitize a specially crafted authentication request to…Microsoft · Team Foundation Server 2018 · 2019-05-16 | – | 8.5% | 2019-05-16 |
| CVE-2013-2011WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of…Super Cache Plugin · Super Cache Plugin · 2019-12-26 | – | 7.1% | 2019-12-26 |
| CVE-2019-0956An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'M…Microsoft · Microsoft SharePoint Foundation · 2019-05-16 | – | 5.2% | 2019-05-16 |
| CVE-2022-25235xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.Libexpat Project · Libexpat · CVSS 9.8 · 2022-02-16 | 9.8 | 5.0% | 2022-02-16 |
| CVE-2020-24972The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handli…Kleopatra Project · Kleopatra · CVSS 8.8 · 2020-08-29 | 8.8 | 4.9% | 2020-08-29 |
| CVE-2022-29599Commandline class shell injection vulnerabilitiesApache Software Foundation · Apache Maven · 2022-05-23 | – | 4.4% | 2022-05-23 |
| CVE-2025-31651Apache Tomcat: Bypass of rules in Rewrite ValveApache Software Foundation · Apache Tomcat · CVSS 9.8 · 2025-04-28 | 9.8 | 4.3% | 2025-04-28 |
| CVE-2019-0857A spoofing vulnerability that could allow a security feature bypass exists in when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Spo…Microsoft · Azure DevOps Server · 2019-04-09 | – | 3.9% | 2019-04-09 |
| CVE-2019-6109An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object nam…Openbsd · Openssh · CVSS 6.8 · 2019-01-31 | 6.8 | 3.8% | 2019-01-31 |
| CVE-2020-13625PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted…Phpmailer Project · Phpmailer · 2020-06-08 | – | 3.8% | 2020-06-08 |
| CVE-2019-10074An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been disabled on such a field. This was the case for the Customer…Apache · OFBiz · 2019-09-11 | – | 3.4% | 2019-09-11 |
| CVE-2019-11325An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8. The VarExport component incorrectly escapes strings, allowing some specially crafted ones to escalate to e…Sensiolabs · Symfony · 2019-11-21 | – | 3.4% | 2019-11-21 |
| CVE-2021-28940Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an is…Magpierss Project · Magpierss · 2021-04-02 | – | 3.3% | 2021-04-02 |
| CVE-2019-9853Insufficient URL decoding flaw in categorizing macro locationDocument Foundation · LibreOffice · 2019-09-27 | – | 3.1% | 2019-09-27 |
| CVE-2022-45143Apache Tomcat: JsonErrorReportValve escapingApache Software Foundation · Apache Tomcat · 2023-01-03 | – | 2.7% | 2023-01-03 |
| CVE-2018-9246The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable values used as part of shell command e…Ledgersmb · Ledgersmb · 2018-06-08 | – | 2.6% | 2018-06-08 |
| CVE-2018-15494In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.Dojotoolkit · Dojo · 2018-08-18 | – | 2.5% | 2018-08-18 |
| CVE-2024-38474Apache HTTP Server weakness with encoded question marks in backreferencesApache Software Foundation · Apache HTTP Server · CVSS 8.1 · 2024-07-01 | 8.1 | 2.5% | 2024-07-01 |
| CVE-2022-26174A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields.Beekeeperstudio · Beekeeper-Studio · 2022-03-21 | – | 2.4% | 2022-03-21 |
| CVE-2014-9938contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.Git-Scm · Git · 2017-03-20 | – | 2.3% | 2017-03-20 |
| CVE-2022-22992Command Injection Remote Code Execution vulnerability on Western Digital My Cloud devices.Westerndigital · My Cloud Os · CVSS 7.8 · 2022-01-28 | 7.8 | 2.3% | 2022-01-28 |
| CVE-2018-18838An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry.My-Netdata · Netdata · 2019-06-18 | – | 2.2% | 2019-06-18 |
| CVE-2019-11717A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a separator, allowing for possible spoofing of origin a…Mozilla · Firefox ESR · 2019-07-23 | – | 2.1% | 2019-07-23 |
| CVE-2022-40870The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a…Parallels · Remote Application Server · CVSS 8.1 · 2022-11-22 | 8.1 | 2.1% | 2022-11-22 |
| CVE-2022-28960A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the _oups parameter at /ecrire.Spip · Spip · 2022-05-19 | – | 2.1% | 2022-05-19 |
| CVE-2020-13654XWiki Platform before 12.8 mishandles escaping in the property displayer.Xwiki · Xwiki · CVSS 7.5 · 2020-12-31 | 7.5 | 1.9% | 2020-12-31 |
| CVE-2024-46901Apache Subversion: mod_dav_svn denial-of-service via control characters in pathsApache Software Foundation · Apache Subversion · CVSS 3.1 · 2024-12-09 | 3.1 | 1.9% | 2024-12-09 |
| CVE-2023-45135XWiki users can be tricked to execute scripts as the create page action doesn't display the page's titlexwiki · xwiki-platform · CVSS 9.1 · 2023-10-25 | 9.1 | 1.9% | 2023-10-25 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.