CWE-175 - Improper Handling of Mixed Encoding

Home/CWEs/CWE info/

CWE-175

Abstraction:
Variant

Structure:
Simple

Status:
Draft

Weakness Name: Improper Handling of Mixed Encoding

Description: The product does not properly handle when the same input uses several different (mixed) encodings.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-172Encoding Error

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Latest Security News

Too Much 'Trust,' Not Enough 'Verify'

FBI links North Korean hackers to $308 million crypto heist

Trump 2.0 Portends Big Shift in Cybersecurity Policies

DNSSEC Denial-of-Service Attacks Show Technology's Fragility

Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

Clop ransomware is now extorting 66 Cleo data-theft victims

Clop ransomware threatens 66 Cleo attack victims with data leak

North Korean Hackers Pull Off $308M Bitcoin Heist from Crypto Firm DMM Bitcoin

Top Alert List

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

InformationalInformation Disclosure - Suspicious Comments

LowCookie without SameSite Attribute

CSP

MediumMissing Anti-clickjacking Header

InformationalRe-examine Cache-control Directives

InformationalModern Web Application

LowX-Content-Type-Options Header Missing

LowServer Leaks Version Information via "Server" HTTP Response Header Field

Latest CVE List

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Common CWEs

CWE-612 Improper Authorization of Index Containing Sensitive Information

CWE-1422 Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution

CWE-837 Improper Enforcement of a Single, Unique Action

LowCWE-379 Creation of Temporary File in Directory with Insecure Permissions

CWE-337 Predictable Seed in Pseudo-Random Number Generator (PRNG)

CWE-1164 Irrelevant Code

CWE-313 Cleartext Storage in a File or on Disk

CWE-506 Embedded Malicious Code

CWE-668 Exposure of Resource to Wrong Sphere

HighCWE-640 Weak Password Recovery Mechanism for Forgotten Password

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-175 - Improper Handling of Mixed Encoding

The product does not properly handle when the same input uses several different (mixed) encodings.