133 matches found
TRENDnet TEW-432BRP Form SysCmd Command Execution
The vulnerability of the formSysCmd function in TRENDnet TEW-432BRP router microprogramming software is related to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability may allow a remote attacker to execute arbitrary commands...
ROS-20260529-73-0014
The vulnerability in openbao is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EDIMAX BR-6478AC Command Injection
The vulnerability of the formAccept function in the microprogramming software for EDIMAX BR-6478AC routers lies in the lack of measures to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...
Edimax BR-6675nD Stainfo Command Injection
The vulnerability of the stainfo function in the microprogramming software of Edimax BR-6675nD wireless signal amplifiers is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability could allow a malicious actor to inject arbitrary...
Apache Tomcat Code Execution
The vulnerability of the Apache Tomcat application server is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Azure Machine Learning Spoofing
The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to perform spearishing attacks...
Microsoft Edge Privilege Escalation
The vulnerability of Microsoft Edge relates to incorrect elimination of special elements in output data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
.NET Privilege Escalation
The vulnerability of the .NET software platform is related to insufficient validation of output data. Exploiting this vulnerability can allow attackers to enhance their privileges...
Thunderbird Confidential Data Access
The vulnerability of the Thunderbird email client is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
CVE-2026-31764 iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only
In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: Set buffer sampling frequency for accelerometer only The stlsm6dsxhwfifoodrstore function, which is called when userspace writes the buffer sampling frequency sysfs attribute, calls stlsm6dsxcheckodr, which...
PT-2026-36399
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access occurs in the st lsm6dsx hwfifo odr store function when userspace writes to the buffer sampling frequency sysfs attribute. This function calls st lsm6dsx check od...
Hyper-V Hardware Virtualization Code Execution
The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to insufficient checking of output data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
NVIDIA Triton Inference Server security vulnerabilities
NVIDIA Triton Inference Server is an open-source software developed by NVIDIA Corporation. It helps standardize model deployment and provide fast, scalable AI capabilities in production environments. NVIDIA Triton Inference Server has a security vulnerability that stems from insufficient input...
GitLab Improper Output Encoding Information Disclosure
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect encoding or filtering of output data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
D-Link DI-8200G Router Command Execution
The vulnerability of the /upgradefilter.asp file in D-Link DI-8200G router microprogramming software exists due to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
ROS-20260209-73-0020
PowerDNS Recursor DNS server vulnerability is related to failure to take measures to neutralize special elements in the output data. Exploitation of the vulnerability could allow a remote attacker to affect the integrity and availability of protected information...
ROS-20260209-73-0018
PowerDNS Recursor DNS server vulnerability is related to failure to take measures to neutralize special elements in the output data. Exploitation of the vulnerability could allow a remote attacker to affect the integrity and availability of protected information...
ROS-20260209-73-0019
PowerDNS Recursor DNS server vulnerability is related to failure to take measures to neutralize special elements in the output data. Exploitation of the vulnerability could allow a remote attacker to affect the integrity and availability of protected information...
reNgine Framework Code Execution
The vulnerability of the reNgine framework for web application reconnaissance is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PowerDNS Recursor Output Validation
The vulnerability of the PowerDNS Recursor DNS server relates to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...