CWE-176 - Improper Handling of Unicode Encoding

Home/CWEs/CWE info/

CWE-176

Abstraction:
Variant

Structure:
Simple

Status:
Draft

Weakness Name: Improper Handling of Unicode Encoding

Description: The product does not properly handle when an input contains Unicode encoding.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-172Encoding Error

Release Date:
2006-07-19

Latest Modification Date:
2024-02-29

Top Security News

Truist Bank confirms breach after stolen data shows up on hacking forum

Massive PSAUX ransomware attack targets 22,000 CyberPanel instances

Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)

Microsoft SharePoint RCE bug exploited to breach corporate network

Google patches actively exploited Android vulnerability (CVE-2024-43093)

VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

Download: CIS Critical Security Controls v8.1

CISA proposes new security requirements to protect govt, personal data

Common Alerts

MediumApplication Error Disclosure

HighViewstate without MAC Signature (Sure)

MediumSession ID in URL Rewrite

LowIn Page Banner Information Leak

MediumHTTP Only Site

LowCSP: X-Content-Security-Policy

MediumTrace.axd Information Leak

MediumReverse Tabnabbing

InformationalInformation Disclosure - Sensitive Information in HTTP Referrer Header

HighProperties File Disclosure - /WEB-INF folder

Latest CVE List

CVE-2024-5910 Palo Alto Expedition Missing Authentication Vulnerability

CVE-2024-43093 Android Framework Privilege Escalation Vulnerability

CVE-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability

CVE-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability

CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability

CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

CVE-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability

CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability

Common CWEs

CWE-1331 Improper Isolation of Shared Resources in Network On Chip (NoC)

CWE-1232 Improper Lock Behavior After Power State Transition

CWE-92 DEPRECATED: Improper Sanitization of Custom Special Characters

CWE-501 Trust Boundary Violation

CWE-1126 Declaration of Variable with Unnecessarily Wide Scope

HighCWE-256 Plaintext Storage of a Password

CWE-1229 Creation of Emergent Resource

CWE-1304 Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation

CWE-656 Reliance on Security Through Obscurity

CWE-1246 Improper Write Handling in Limited-write Non-Volatile Memories

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-176 - Improper Handling of Unicode Encoding

The product does not properly handle when an input contains Unicode encoding.