Skip to content
OpenAdvisories

Weakness (CWE)

CWE-791: Incomplete Filtering of Special Elements

Base Incomplete

The product receives data from an upstream component, but it does not completely filter special elements before sending it to a downstream component.

Source: MITRE CWE-791

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.6
    CVE-2026-11998

    AngularJS XSS via SCE resource URL sanitization bypass

    A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted…

    Google AngularJS angular.js angular.js Debian Ubuntu npm
  • High 8.7
    CVE-2026-44232

    dssrf: every IPv6 category bypasses is_url_safe

    DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.3, every IPv6 category bypasses is_url_safe. This vulnerability is fixed in 1.0.3.

    HackingRepo dssrf-js dssrf npm
  • High 7.5
    CVE-2026-7164

    pf can overflow the stack parsing crafted SCTP packets

    Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic. Remote attackers can craft packets which cause affected systems to panic. This affects any system where pf is conf…

    FreeBSD FreeBSD
  • High 7.7
    CVE-2026-29186

    @backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution

    Backstage is an open framework for building developer portals. Prior to version 1.14.3, this is a configuration bypass vulnerability that enables arbitrary code execution. The @backstage/plugin-techdocs-node package uses an allowlist to filter dangerous MkDoc…

    backstage backstage @backstage/plugin-techdocs-node npm
  • High 7.3
    CVE-2025-6761

    Kingdee Cloud-Starry-Sky Enterprise Edition Freemarker Engine DynamicForm 4 Action.class plugin.buildMobilePopHtml special elements used in a template engine

    A vulnerability was found in Kingdee Cloud-Starry-Sky Enterprise Edition 6.x/7.x/8.x/9.0. It has been rated as critical. Affected by this issue is the function plugin.buildMobilePopHtml of the file \k3\o2o\bos\webapp\action\DynamicForm 4 Action.class of the c…

    Kingdee Cloud-Starry-Sky Enterprise Edition
  • High 8.5
    CVE-2024-45481

    Improper authentication in SSH of B&R APROL

    An Incomplete Filtering of Special Elements vulnerability in scripts using the SSH server on B&R APROL <4.4-00P5 may allow an authenticated local attacker to authenticate as another legitimate user.

    B&R Industrial Automation B&R APROL
  • High 8.8
    CVE-2024-47590

    Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher

    An unauthenticated attacker can create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link, input data will be used by the web site page generation to create content which when executed in the vi…

    SAP_SE SAP Web Dispatcher
  • High 7.5
    CVE-2024-27489

    An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.

  • High 8.0
    CVE-2022-21668 Public exploit

    Pipenv's requirements.txt parsing allows malicious index url in comments

    pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files allows an attacker to insert a specially crafted string inside a comment anywhere within a requiremen…

    pypa pipenv pipenv pipenv Ubuntu PyPI