CWE-74— Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection)

1,457 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-74page 1 of 30

CVE-2005-3056CRITICALCVSS 9.8EG 9.8
2019-11-01
TWiki allows arbitrary shell command execution via the Include function
CVE-2010-3668HIGHCVSS 7.5EG 7.5
2019-11-04
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl.
CVE-2010-4654HIGHCVSS 7.8EG 7.8
2019-11-13
poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.
CVE-2010-4658MEDIUMCVSS 5.3EG 5.3
2020-02-07
statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks.
CVE-2011-2538HIGHCVSS 7.2EG 7.2
2019-10-29
Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands.
CVE-2011-2717CRITICALCVSS 9.8EG 9.8
2019-11-27
The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in a hostname obtained from a DHCP message.
CVE-2011-3624MEDIUMCVSS 5.3EG 5.3
2019-11-26
Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers in requests, which might allow remote attackers to inject arbitrary text into …
CVE-2011-4558HIGHCVSS 7.2EG 7.2
2020-01-27
Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and regex parameters.
CVE-2012-0070HIGHCVSS 7.5EG 7.5
2020-01-15
spamdyke prior to 4.2.1: STARTTLS reveals plaintext
CVE-2012-1495CRITICALCVSS 9.8EG 9.8
2020-01-27
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.
CVE-2012-1496HIGHCVSS 8.8EG 8.8
2020-01-27
Local file inclusion in WebCalendar before 1.2.5.
CVE-2012-2931HIGHCVSS 7.2EG 7.2
2020-01-09
PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.
CVE-2013-1437CRITICALCVSS 9.8EG 9.8
2020-01-28
Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value.
CVE-2013-2010CRITICALCVSS 9.8EG 9.8
2020-02-12
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
CVE-2013-2095CRITICALCVSS 9.8EG 9.8
2019-12-10
rubygem-openshift-origin-controller: API can be used to create applications via cartridge_cache.rb URI.prase() to perform command injection
CVE-2013-2678HIGHCVSS 8.1EG 8.1
2020-02-04
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script usi…
CVE-2013-3212HIGHCVSS 8.1EG 8.1
2020-01-28
vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote attackers to view files and execute local script code.
CVE-2013-3214CRITICALCVSS 9.8EG 9.8
2020-01-28
vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.
CVE-2013-3628HIGHCVSS 8.8EG 9.0
2020-02-07
Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability
CVE-2013-4144CRITICALCVSS 9.8EG 9.8
2022-06-30
There is an object injection vulnerability in swfupload plugin for wordpress.
CVE-2013-4318MEDIUMCVSS 5.4EG 5.4
2019-12-26
File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory.
CVE-2013-4486CRITICALCVSS 9.8EG 9.8
2019-12-03
Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging
CVE-2013-6501NONECVSS 0.0EG 0.0
2015-03-30
The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file und…
CVE-2013-7070CRITICALCVSS 9.8EG 9.8
2019-12-31
The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI.
CVE-2013-7324MEDIUMCVSS 5.3EG 5.3
2020-02-17
Webkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards …
CVE-2013-7378CRITICALCVSS 9.8EG 9.8
2020-02-12
scripts/email.coffee in the Hubot Scripts module before 2.4.4 for Node.js allows remote attackers to execute arbitrary commands.
CVE-2013-7380CRITICALCVSS 9.8EG 9.8
2020-01-10
The Etherpad Lite ep_imageconvert Plugin has a Remote Command Injection Vulnerability
CVE-2013-7381CRITICALCVSS 9.8EG 9.8
2020-02-12
libnotify before 1.0.4 for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in a call to libnotify.notify.
CVE-2013-7487CRITICALCVSS 9.8EG 9.8
2020-03-21
On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000.
CVE-2014-10386MEDIUMCVSS 6.1EG 6.1
2019-08-22
The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections.
CVE-2014-10391MEDIUMCVSS 6.1EG 6.1
2019-08-22
The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.
CVE-2014-10394MEDIUMCVSS 6.1EG 6.1
2019-08-22
The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header.
CVE-2014-2294CRITICALCVSS 9.8
2018-04-17
Open Web Analytics (OWA) before 1.5.7 allows remote attackers to conduct PHP object injection attacks via a crafted serialized object in the owa_event parameter to queue.php.
CVE-2014-3700CRITICALCVSS 9.8EG 9.8
2019-11-21
eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data
CVE-2014-4172CRITICALCVSS 9.8EG 9.8
2020-01-24
A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to in…
CVE-2014-4678CRITICALCVSS 9.8EG 9.8
2020-02-20
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability exists because of an incomplete fix for C…
CVE-2014-4966CRITICALCVSS 9.8EG 9.8
2020-02-18
Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code via (1) crafted lookup('pipe') calls or …
CVE-2014-4967CRITICALCVSS 9.8EG 9.8
2020-02-18
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as demonstrated by a fact with (1) a trailin…
CVE-2014-4982CRITICALCVSS 9.8EG 9.8
2020-01-10
LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server.
CVE-2014-5083HIGHCVSS 8.8EG 8.8
2020-02-10
A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5083 pertains to instances of fwrite in Sphid…
CVE-2014-5084HIGHCVSS 8.8EG 8.8
2020-02-10
A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let a remote malicious user execute arbitrary code. CVE-2014-5084 pertains to instances of fwrite in Sphider Pro only, but …
CVE-2014-5085HIGHCVSS 8.8EG 8.8
2020-02-10
A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5085 pertains to instances of fwrite in Sphider P…
CVE-2014-5086HIGHCVSS 8.8EG 8.8
2020-02-10
A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5086 pertains to instances of fw…
CVE-2014-5287HIGHCVSS 8.8EG 8.8
2020-01-08
A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface (WUI).
CVE-2014-7236CRITICALCVSS 9.1EG 9.1
2020-02-17
Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to do/view/Main/WebHome.
CVE-2014-7844HIGHCVSS 7.8EG 7.8
2020-01-14
BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.
CVE-2014-7952HIGHCVSS 7.8
2018-01-12
The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveraging failure to filter application data streams.
CVE-2015-10027MEDIUMCVSS 5.5EG 9.8
2023-01-07
A vulnerability, which was classified as problematic, has been found in hydrian TTRSS-Auth-LDAP. Affected by this issue is some unknown functionality of the component Username Handler. The manipulation leads to ldap injection. Upgrading to…
CVE-2015-10040MEDIUMCVSS 5.4EG 6.5
2023-01-13
A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injecti…
CVE-2015-10062MEDIUMCVSS 5.5EG 9.8
2023-01-17
A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. The manipulation leads to injection. Upgrading to version 14.10.1 i…

Map vulnerabilities like CWE-74 to your infrastructure

EchelonGraph correlates every CVE — across CWE-74 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →