52 matches found
CVE-2026-45452
The Unitronics UniStream Pro and UniLogic software are vulnerable to a CWE-134 Use of Externally-Controlled format string vulnerability. This issue specifically impacts Unitronics UniStream Pro versions only (B10 / C10 ) and UniLogic versions prior to 1.41.329 . The vulnerability allows for poten...
CVE-2026-102062
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server...
CVE-2026-101965 Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled
An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI...
CVE-2026-101966
A Use of Externally-Controlled Format String vulnerability exists in the jti-dialoutd component of Juniper Networks Junos OS Evolved . An authenticated network attacker can exploit this by submitting a crafted analytics sensor resource through a gNMI listener . This flaw can lead to a persistent ...
EUVD-2026-101425
A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener...
PT-2026-103658
Name of the Vulnerable Software and Affected Versions ASUS Router affected versions not specified Description An issue exists where the use of an externally controlled format string in the router modules allows a remote authenticated user to execute arbitrary commands. This is achieved by uploadi...
CVE-2026-18461
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional Core Libraries allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6...
EUVD-2026-84616
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional Core Libraries allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6...
CVE-2026-18461 Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection.
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional Core Libraries allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6...
CVE-2026-18461
The RTI Connext Professional (Core Libraries) is vulnerable to a Format String Injection flaw due to the Use of Externally-Controlled Format String . This vulnerability affects versions 7.5.0 before 7.7.0.1 and 7.3.0.10 before 7.3.1.6 . An attacker could potentially exploit this to impact the con...
CVE-2026-18461: Use of Externally-Controlled Format String
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional Core Libraries allows Format String Injection. This issue affects Connext Professional: from 7.5.0 before 7.7.0.1, from 7.3.0.10 before 7.3.1.6...
CVE-2026-63073: Use of Externally-Controlled Format String
Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...
CVE-2026-46465: Use of Externally-Controlled Format String
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of externally-controlled format string vulnerability. A high privileg...
Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2024-50397)
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We have already fixed the vulnerability i...
EUVD-2024-45079
Malicious code in bioql PyPI...
EUVD-2024-21344
Malicious code in bioql PyPI...
EUVD-2024-45081
Malicious code in bioql PyPI...
EUVD-2024-41441
Malicious code in bioql PyPI...