CWE-707— Improper Neutralization
The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.— MITRE CWE catalog
266 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-707page 5 of 6
- CVE-2022-3580MEDIUMCVSS 2.4EG 6.12022-10-18
A vulnerability, which was classified as problematic, has been found in SourceCodester Cashier Queuing System 1.0.1. This issue affects some unknown processing of the component User Creation Handler. The manipulation leads to cross site sc…
- CVE-2022-3519MEDIUMCVSS 2.4EG 6.12022-10-15
A vulnerability classified as problematic was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Quote Requests Tab. The manipulation of the argument Mana…
- CVE-2022-3518MEDIUMCVSS 2.4EG 6.12022-10-15
A vulnerability classified as problematic has been found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the component User Creation Handler. The manipulation of the argument First Name/Middle Name/…
- CVE-2025-27712MEDIUMCVSS 5.7EG 5.72025-11-11
Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low …
- CVE-2026-10222MEDIUMCVSS 5.6EG 5.62026-06-01
A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.30. Affected by this issue is the function _sanitize_env_lines of the file hermes_cli/config.py. The manipulation results in injection. It is possible to launch …
- CVE-2022-3971MEDIUMCVSS 4.6EG 5.62022-11-13
A vulnerability was found in matrix-appservice-irc up to 0.35.1. It has been declared as critical. This vulnerability affects unknown code of the file src/datastore/postgres/PgDataStore.ts. The manipulation of the argument roomIds leads to…
- CVE-2026-92213MEDIUMCVSS 5.5EG 5.52026-09-16
A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/web_core/src/v0_9/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument…
- CVE-2024-10841MEDIUMCVSS 5.5EG 5.52024-11-05
A vulnerability classified as critical was found in romadebrian WEB-Sekolah 1.0. Affected by this vulnerability is an unknown functionality of the file /Proses_Kirim.php of the component Mail Handler. The manipulation of the argument Name …
- CVE-2023-45315MEDIUMCVSS 5.5EG 5.52024-05-16
Improper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user to potentially enable denial of service via local access.
- CVE-2022-4587MEDIUMCVSS 4.3EG 5.42022-12-17
A vulnerability, which was classified as problematic, has been found in Opencaching Deutschland oc-server3. This issue affects some unknown processing of the file htdocs/templates2/ocstyle/login.tpl of the component Login Page. The manipul…
- CVE-2022-4089MEDIUMCVSS 4.3EG 5.42022-11-24
A vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnerability affects unknown code of the file /pages/processlogin.php. The manipulation of the argument user leads to cross site script…
- CVE-2022-4730MEDIUMCVSS 3.5EG 5.42022-12-27
A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler. The manipulation leads to cross site scripting. It is possible to launch the at…
- CVE-2022-4729MEDIUMCVSS 3.5EG 5.42022-12-27
A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler. The manipulation leads to cross site scripting. The attack may be initiated remotel…
- CVE-2022-4728MEDIUMCVSS 3.5EG 5.42022-12-27
A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Th…
- CVE-2022-4642MEDIUMCVSS 3.5EG 5.42022-12-21
A vulnerability was found in tatoeba2. It has been classified as problematic. This affects an unknown part of the component Profile Name Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotel…
- CVE-2022-4640MEDIUMCVSS 3.5EG 5.42022-12-21
A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be la…
- CVE-2022-3877MEDIUMCVSS 3.5EG 5.42022-12-19
A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected is an unknown function of the component URL Field Handler. The manipulation leads to cross …
- CVE-2022-4602MEDIUMCVSS 3.5EG 5.42022-12-18
A vulnerability was found in Shoplazza LifeStyle 1.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/api/theme-edit/ of the component Review Flow Handler. The manipulation of the argument Ti…
- CVE-2022-4601MEDIUMCVSS 3.5EG 5.42022-12-18
A vulnerability was found in Shoplazza LifeStyle 1.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/api/theme-edit/ of the component Shipping/Member Discount/Icon. The manipulation leads to…
- CVE-2022-4600MEDIUMCVSS 3.5EG 5.42022-12-18
A vulnerability was found in Shoplazza LifeStyle 1.1. It has been classified as problematic. This affects an unknown part of the file /admin/api/theme-edit/ of the component Product Carousel Handler. The manipulation of the argument Headin…
- CVE-2022-4599MEDIUMCVSS 3.5EG 5.42022-12-18
A vulnerability was found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/api/theme-edit/ of the component Product Handler. The manipulation of the argument …
- CVE-2022-4598MEDIUMCVSS 3.5EG 5.42022-12-18
A vulnerability has been found in Shoplazza LifeStyle 1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/api/theme-edit/ of the component Announcement Handler. The manipulation …
- CVE-2022-4597MEDIUMCVSS 3.5EG 5.42022-12-18
A vulnerability, which was classified as problematic, was found in Shoplazza LifeStyle 1.1. Affected is an unknown function of the file /admin/api/admin/v2_products of the component Create Product Handler. The manipulation leads to cross s…
- CVE-2022-4596MEDIUMCVSS 3.5EG 5.42022-12-18
A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argume…
- CVE-2022-4401MEDIUMCVSS 3.5EG 5.42022-12-11
A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. …
- CVE-2022-4396MEDIUMCVSS 3.5EG 5.42022-12-10
A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function _get_option of the file pyRdfa/__init__.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th…
- CVE-2022-4377MEDIUMCVSS 3.5EG 5.42022-12-09
A vulnerability was found in S-CMS 5.0 Build 20220328. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Contact Information Page. The manipulation of the argument Make a Call …
- CVE-2022-4347MEDIUMCVSS 3.5EG 5.42022-12-08
A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting…
- CVE-2022-4253MEDIUMCVSS 3.5EG 5.42022-12-01
A vulnerability was found in SourceCodester Canteen Management System. It has been declared as problematic. This vulnerability affects the function builtin_echo of the file customer.php. The manipulation leads to cross site scripting. The …
- CVE-2022-3963MEDIUMCVSS 3.5EG 5.42022-11-12
A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fm_id leads to cross site scriptin…
- CVE-2022-3943MEDIUMCVSS 3.5EG 5.42022-11-11
A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the file cms_chip.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attac…
- CVE-2022-3716MEDIUMCVSS 3.5EG 5.42022-10-27
A vulnerability classified as problematic was found in SourceCodester Online Medicine Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /omos/admin/?page=user/list. The manipulation of the argument…
- CVE-2022-3587MEDIUMCVSS 3.5EG 5.42022-10-18
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component My Account. The manipulation of the arg…
- CVE-2022-3505MEDIUMCVSS 3.5EG 5.42022-10-14
A vulnerability was found in SourceCodester Sanitization Management System. It has been classified as problematic. Affected is an unknown function of the file /php-sms/admin/. The manipulation of the argument page leads to cross site scrip…
- CVE-2022-3503MEDIUMCVSS 3.5EG 5.42022-10-14
A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Supplier Handler. The manipulation of the argument Supplier Nam…
- CVE-2022-3502MEDIUMCVSS 3.5EG 5.42022-10-14
A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. I…
- CVE-2022-3497MEDIUMCVSS 3.5EG 5.42022-10-14
A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been classified as problematic. Affected is an unknown function of the component Master List. The manipulation of the argument city/state/country/posi…
- CVE-2022-3493MEDIUMCVSS 3.5EG 5.42022-10-13
A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the component Add Employee Handler. The manipulation of the argument…
- CVE-2022-3453MEDIUMCVSS 3.5EG 5.42022-10-11
A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /transcation.php. The manipulation of the argument buyer_name leads to c…
- CVE-2022-3452MEDIUMCVSS 3.5EG 5.42022-10-11
A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument category_name leads to c…
- CVE-2022-3434MEDIUMCVSS 3.5EG 5.42022-10-08
A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been rated as problematic. Affected by this issue is the function prepare of the file /Admin/add-student.php. The manipulation leads to cross site scrip…
- CVE-2022-3333MEDIUMCVSS 3.5EG 5.42022-09-28
A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an unknown function of the file /v1/tasks/create/ of the component REST Call Handler. The manipulation of the argument onani…
- CVE-2020-36609MEDIUMCVSS 2.4EG 5.42022-12-08
A vulnerability was found in annyshow DuxCMS 2.1. It has been classified as problematic. This affects an unknown part of the file admin.php&r=article/AdminContent/edit of the component Article Handler. The manipulation of the argument cont…
- CVE-2022-4251MEDIUMCVSS 2.4EG 5.42022-12-01
A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some unknown functionality of the file editBooking.php. The manipulation leads to cross site scripting. The attack may be lau…
- CVE-2025-3805MEDIUMCVSS 5.3EG 5.32025-04-19
A vulnerability classified as critical was found in sarrionandia tournatrack up to 4c13a23f43da5317eea4614870a7a8510fc540ec. Affected by this vulnerability is an unknown functionality of the file check_id.py of the component Jinja2 Templat…
- CVE-2025-3804MEDIUMCVSS 5.3EG 5.32025-04-19
A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function of the file Gen.py of the component Jinja2 Template Handler. The manipulation leads to injection. Attacking locally is a…
- CVE-2025-0697MEDIUMCVSS 5.3EG 5.32025-01-24
A vulnerability, which was classified as problematic, was found in Telstra Smart Modem Gen 2 up to 20250115. This affects an unknown part of the component HTTP Header Handler. The manipulation of the argument Content-Disposition leads to i…
- CVE-2022-23004MEDIUMCVSS 5.3EG 5.32022-07-29
When computing a shared secret or point multiplication on the NIST P-256 curve using a public key with an X coordinate of zero, an error is returned from the library, and an invalid unreduced value is written to the output buffer. This may…
- CVE-2026-76993MEDIUMCVSS 5.0EG 5.02026-08-20
A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection. The attack can be execu…
- CVE-2022-4053MEDIUMCVSS 2.4EG 4.82022-11-17
A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function of the file createClass.php. The manipulation of the argument className leads to cross site scripting…
Map vulnerabilities like CWE-707 to your infrastructure
EchelonGraph correlates every CVE — across CWE-707 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →