ROS-20260724-73-0023

The vulnerability of the Microsoft .NET software platform is related to incorrect encoding or escaping of output data. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...

The vulnerability of the console-based graphic editor ImageMagick arises from a lack of mechanisms for encoding or shielding output data, allowing attackers to execute arbitrary code.

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of mechanisms for encoding or shielding the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260629-73-0005

The vulnerability in ImageMagick is related to a lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

ROS-20260608-73-0008

The vulnerability of the .NET software platform is related to insufficient testing of output data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260608-73-0007

The vulnerability of the .NET software platform is related to insufficient testing of output data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260608-73-0009

The vulnerability of the .NET software platform is related to insufficient testing of output data. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260529-73-0014

The vulnerability in openbao is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the .NET software platform, related to insufficient validation of output data, allows attackers to increase their privileges.

The vulnerability of the .NET software platform is related to insufficient validation of output data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Thunderbird email client, allowing a hacker to gain access to confidential data

The vulnerability of the Thunderbird email client is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

CVE-2026-31764 iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: Set buffer sampling frequency for accelerometer only The stlsm6dsxhwfifoodrstore function, which is called when userspace writes the buffer sampling frequency sysfs attribute, calls stlsm6dsxcheckodr, which...

PT-2026-36399

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access occurs in the st lsm6dsx hwfifo odr store function when userspace writes to the buffer sampling frequency sysfs attribute. This function calls st lsm6dsx check od...

NVIDIA Triton Inference Server 安全漏洞

NVIDIA Triton Inference Server is an open-source software developed by NVIDIA Corporation. It helps standardize model deployment and provide fast, scalable AI capabilities in production environments. NVIDIA Triton Inference Server has a security vulnerability that stems from insufficient input...

ROS-20260209-73-0020

PowerDNS Recursor DNS server vulnerability is related to failure to take measures to neutralize special elements in the output data. Exploitation of the vulnerability could allow a remote attacker to affect the integrity and availability of protected information...

ROS-20260209-73-0018

PowerDNS Recursor DNS server vulnerability is related to failure to take measures to neutralize special elements in the output data. Exploitation of the vulnerability could allow a remote attacker to affect the integrity and availability of protected information...

ROS-20260209-73-0019

PowerDNS Recursor DNS server vulnerability is related to failure to take measures to neutralize special elements in the output data. Exploitation of the vulnerability could allow a remote attacker to affect the integrity and availability of protected information...

The vulnerability of the C++ Log4cxx logging framework lies in its improper handling of output data for registration logs, allowing an attacker to gain unauthorized access to confidential data.

The vulnerability of the C++ Apache Log4cxx logging framework is related to improper handling of output data for registration logs. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential data...

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird arises from incorrect encoding or the concealment of output data, allowing attackers to perform cross-site scripting (XSS) attacks.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to improper encoding or the concealment of output data. Exploiting these vulnerabilities allows a remote attacker to perform cross-site scripting attacks XSS...

The vulnerability of the hid_bpfdestroy_device() function in the HID component of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hidbpfdestroydevice function in the HID component of the Linux kernel is related to improper elimination of certain elements in the output data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a deadlock and link starvation issue in the output data path of the ngsm driver...

The vulnerability of the getBlock() function in the monitoring and security management tool Trend Micro Apex Central allows a threat to execute arbitrary code.

The vulnerability of the getBlock function in the Trend Micro Apex Central security monitoring and management tool is related to the failure to take measures to neutralize specific elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...