CWE-176 - Improper Handling of Unicode Encoding

Home/CWEs/CWE info/

CWE-176

Abstraction:
Variant

Structure:
Simple

Status:
Draft

Weakness Name: Improper Handling of Unicode Encoding

Description: The product does not properly handle when an input contains Unicode encoding.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-172Encoding Error

Release Date:
2006-07-19

Latest Modification Date:
2024-02-29

Top Security News

Recorded Future CEO applauds "undesirable" designation by Russia

CISA orders federal agencies to secure Microsoft 365 tenants

Google Chrome uses AI to analyze pages in new scam detection feature

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Exploit released for critical WhatsUp Gold RCE flaw, patch now

Microsoft fixes exploited zero-day (CVE-2024-49138)

Common Alerts

LowX-AspNet-Version Response Header

InformationalGraphQL Endpoint Supports Introspection

MediumInsecure HTTP Method

LowCookie without SameSite Attribute

InformationalStorable but Non-Cacheable Content

InformationalSec-Fetch-User Header is Missing

InformationalUser Controllable JavaScript Event (XSS)

HighGeneric Padding Oracle

HighSOAP XML Injection

LowFull Path Disclosure

Latest CVE List

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Common CWEs

CWE-547 Use of Hard-coded, Security-relevant Constants

CWE-316 Cleartext Storage of Sensitive Information in Memory

CWE-1293 Missing Source Correlation of Multiple Independent Data

HighCWE-322 Key Exchange without Entity Authentication

LowCWE-480 Use of Incorrect Operator

HighCWE-319 Cleartext Transmission of Sensitive Information

HighCWE-194 Unexpected Sign Extension

CWE-704 Incorrect Type Conversion or Cast

CWE-1222 Insufficient Granularity of Address Regions Protected by Register Locks

CWE-165 Improper Neutralization of Multiple Internal Special Elements

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-176 - Improper Handling of Unicode Encoding

The product does not properly handle when an input contains Unicode encoding.