CWE-140 - Improper Neutralization of Delimiters

Home/CWEs/CWE info/

CWE-140

Abstraction:
Base

Structure:
Simple

Status:
Draft

Weakness Name: Improper Neutralization of Delimiters

Description: The product does not neutralize or incorrectly neutralizes delimiters.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-138Improper Neutralization of Special Elements

Release Date:
2006-07-19

Latest Modification Date:
2023-10-26

Top Security News

Attackers are exploiting 2 zero-days in Palo Alto Networks firewalls (CVE-2024-0012, CVE-2024-9474)

CWE top 25 most dangerous software weaknesses

Chinese APT Gelsemium Targets Linux Systems with New WolfsBane Backdoor

Hackers now use AppDomain Injection to drop CobaltStrike beacons

New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks

Urgent: Critical WordPress Plugin Vulnerability Exposes Over 4 Million Sites

Privileged Accounts, Hidden Threats: Why Privileged Access Security Must Be a Top Priority

Microsoft disrupts ONNX phishing-as-a-service infrastructure

Common Alerts

LowInsufficient Site Isolation Against Spectre Vulnerability

InformationalNon-Storable Content

MediumCSP: script-src unsafe-inline

MediumX-Frame-Options Setting Malformed

LowBig Redirect Detected (Potential Sensitive Information Leak)

HighGeneric Padding Oracle

InformationalInformation Disclosure - Suspicious Comments

Medium.env Information Leak

MediumCSP: Malformed Policy (Non-ASCII)

LowStrict-Transport-Security Header Not Set

Latest CVE List

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CVE-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability

CVE-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability

Top CWE List

CWE-328 Use of Weak Hash

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-384 Session Fixation

HighCWE-122 Heap-based Buffer Overflow

CWE-15 External Control of System or Configuration Setting

CWE-579 J2EE Bad Practices: Non-serializable Object Stored in Session

CWE-686 Function Call With Incorrect Argument Type

CWE-1426 Improper Validation of Generative AI Output

MediumCWE-250 Execution with Unnecessary Privileges

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-140 - Improper Neutralization of Delimiters

The product does not neutralize or incorrectly neutralizes delimiters.