Weaknesses of type CWE-116

427 results

Codificação ou escape inadequado de saída

A aplicação falha em codificar ou fazer escape apropriado dos dados antes de enviá-los ao usuário, permitindo que caracteres especiais sejam interpretados como código (HTML, JavaScript, SQL, etc.). Isso abre brecha para injeção de payload malicioso, especialmente XSS em contextos web.

Example

Um formulário de busca que exibe o termo pesquisado sem escape: se o usuário digita '<img src=x onerror=alert(1)>', a página renderiza o JavaScript em vez de mostrar o texto como string inócua.

How to mitigate

Aplique escape contextual (HTML entity encoding para HTML, JavaScript encoding para scripts, URL encoding para parâmetros) usando bibliotecas consolidadas da sua stack (DOMPurify, OWASP ESAPI, etc.). Validar entrada é primeira linha de defesa, mas escape de saída é crítico e obrigatório.

CVE-2023-29541HIGHFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commEPSS 0.7%CVE-2026-54699HIGHWarp: OS command injection when opening terminal links from WSLEPSS 0.7%CVE-2026-50659MEDIUM.NET Spoofing VulnerabilityEPSS 0.7%CVE-2025-55729CRITICALXWiki Remote Macros vulnerable to remote code execution using the ConfluenceLayoutSection macroEPSS 0.7%CVE-2025-55730CRITICALXWiki Remote Macros vulnerable to remote code execution using the confluence paste code macroEPSS 0.7%CVE-2026-102235HIGHVisual Studio Code Remote Code Execution VulnerabilityEPSS 0.7%CVE-2023-24480CRITICALController stack overflow when decoding messages from the serverEPSS 0.7%CVE-2024-45299MEDIUMalf.io's preloaded data as json is not escaped correctlyEPSS 0.7%CVE-2026-12044HIGHpgAdmin 4: SQL injection in COMMENT ON ... IS '<description>' rendering across dialog templatesEPSS 0.7%CVE-2024-40088MEDIUMA Directory Traversal vulnerability in the Boa webserver of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers toEPSS 0.7%CVE-2026-55855MEDIUMMariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsetsEPSS 0.7%CVE-2026-34481MEDIUMApache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayoutEPSS 0.7%CVE-2026-82756MEDIUMash_authentication_oauth2_server interpolates a tenant-derived value into the WWW-Authenticate challenge without escaping, allowing header parameter injectionEPSS 0.7%CVE-2026-48376MEDIUMColdFusion | Improper Encoding or Escaping of Output (CWE-116)EPSS 0.7%CVE-2026-90999CRITICALSentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environmentEPSS 0.7%CVE-2024-34510HIGHGradio before 4.20 allows credential leakage on Windows.EPSS 0.7%CVE-2024-27938MEDIUMSMTP Smuggling in PostalEPSS 0.7%CVE-2022-36392HIGHImproper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94,EPSS 0.7%CVE-2026-72717CRITICALOrval: Import-time RCE via schema default -> zod module-level template literalEPSS 0.7%CVE-2026-71869CRITICALOrval: Import-time RCE via array-items default -> zod module-level template literalEPSS 0.7%