CWE-176 - Improper Handling of Unicode Encoding

Home/CWEs/CWE info/

CWE-176

Abstraction:
Variant

Structure:
Simple

Status:
Draft

Weakness Name: Improper Handling of Unicode Encoding

Description: The product does not properly handle when an input contains Unicode encoding.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-172Encoding Error

Release Date:
2006-07-19

Latest Modification Date:
2024-02-29

Top Security News

New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks

Hackers now use AppDomain Injection to drop CobaltStrike beacons

Attackers are exploiting 2 zero-days in Palo Alto Networks firewalls (CVE-2024-0012, CVE-2024-9474)

Urgent: Critical WordPress Plugin Vulnerability Exposes Over 4 Million Sites

Privileged Accounts, Hidden Threats: Why Privileged Access Security Must Be a Top Priority

Download: CIS Critical Security Controls v8.1

Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

Researchers Warn of Privilege Escalation Risks in Google's Vertex AI ML Platform

Top Alert List

InformationalModern Web Application

MediumDirectory Browsing

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

CSP

LowCross-Domain JavaScript Source File Inclusion

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

Top CVE List

CVE-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability

CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2019-15949 Nagios XI Remote Code Execution Vulnerability

CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability

CVE-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

CVE-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability

CVE-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability

Common CWEs

HighCWE-319 Cleartext Transmission of Sensitive Information

MediumCWE-665 Improper Initialization

CWE-1394 Use of Default Cryptographic Key

CWE-216 DEPRECATED: Containment Errors (Container Errors)

HighCWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE-140 Improper Neutralization of Delimiters

CWE-178 Improper Handling of Case Sensitivity

CWE-1284 Improper Validation of Specified Quantity in Input

CWE-392 Missing Report of Error Condition

CWE-555 J2EE Misconfiguration: Plaintext Password in Configuration File

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-176 - Improper Handling of Unicode Encoding

The product does not properly handle when an input contains Unicode encoding.