CWE-115 Misinterpretation of Input
Description
The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-115 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-x8xr-mj9x-6h7w | - | MODERATE |
Duplicate Advisory: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations |
2026-06-18 | |
| GHSA-qxp5-gwg8-xv66 | CVE-2025-22870 | MODERATE |
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net |
2026-04-24 | |
| GHSA-6gvq-jcmp-8959 | CVE-2025-68113 | MODERATE |
ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay |
2025-12-20 | |
| GHSA-4hq8-gmxx-h6w9 | CVE-2020-27846 | CRITICAL |
XML Processing error in github.com/crewjam/saml |
2025-09-19 | |
| GHSA-xxmh-rf63-qwjv | CVE-2025-54584 | HIGH |
GitProxy Backfile Parsing Exploit |
2025-07-31 | |
| GHSA-w6hh-w36c-vxmw | CVE-2024-9900 | MODERATE |
LocalAI Cross-Site Scripting (XSS) vulnerability in its search functionality |
2025-03-21 | |
| GHSA-f9c6-4j9h-6c5r | CVE-2023-0880 | MODERATE | - |
Misinterpretation of Input in thorsten/phpmyfaq |
2023-02-28 |
| GHSA-h6q6-9hqw-rwfv | CVE-2021-21366 | MODERATE |
Misinterpretation of malicious XML input |
2023-01-02 | |
| GHSA-pqw5-jmp5-px4v | CVE-2022-3224 | MODERATE |
parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing |
2022-09-19 | |
| GHSA-8cr8-4vfw-mr7h | CVE-2021-28965 | HIGH |
REXML round-trip instability |
2022-08-22 | |
| GHSA-g694-m8vq-gv9h | CVE-2022-1233 | MODERATE |
URL Confusion When Scheme Not Supplied in medialize/uri.js |
2022-04-15 | |
| GHSA-xhqq-x44f-9fgg | CVE-2020-29509 | CRITICAL |
Authentication Bypass in github.com/russellhaering/gosaml2 |
2021-05-21 |