Zimbra Collaboration Suite < 8.8.15 - Improper Encoding

An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 update 1, as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing...

CVE-2026-126170

A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer-BigData 7.6.0 through 7.6.2, FortiManager 8.0.0 through 8.0.2,...

CVE-2026-126170: Fortinet: A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer…

A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer-BigData 7.6.0 through 7.6.2, FortiManager 8.0.0 through 8.0.2,...

ALPINE-CVE-2026-109476

Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network...

CVE-2026-109476

Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network...

CVE-2026-109476

The ASP.NET Core framework is affected by an information disclosure vulnerability (CVE-2026-109476 ) caused by improper encoding or escaping of output . This flaw allows an unauthorized attacker to disclose information over a network. The impact is classified as access to sensitive data with a CV...

CVE-2026-109476

Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network...

CVE-2026-109476

Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network...

ASP.NET Core Information Disclosure Vulnerability

Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-109476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network. CVE-2026-109476 Note that Nessus...

PT-2026-143413

Name of the Vulnerable Software and Affected Versions ASP.NET Core versions 8.0.0-rc.1.23421.29 through 8.0.33 ASP.NET Core versions 9.0.0-preview.1.24081.5 through 9.0.22 ASP.NET Core versions 10.0.0-preview.1.25120.3 through 10.0.14 ASP.NET Core versions 11.0.0-preview.1.26104.118 through...

Security Bulletin: Platform Navigator and Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in handlebars

Summary Platform Navigator and Automation Assets in IBM Integration are vulnerable to multiple vulnerabilities in handlebars. CVE-2026-106444, CVE-2026-106445, CVE-2026-106446 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-106444 DESCRIPTION: Handlebars provides the...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules

Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise runtime are vulnerable to multiple vulnerabilities due to multiple Node.js modules. Vulnerability Details CVEID:CVE-2026-106444 DESCRIPTION:...

CLEANSTART-2026-OA04050 Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat

Security vulnerability affects the thingsboard package. Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat...

Improper Encoding or Escaping of Output

Overview org.webjars.npm:open is a cross platform package that opens stuff like URLs, files, executables. Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the baseOpen function in index.js, which assembles a PowerShell Start-Process invocation by...

Improper Encoding or Escaping of Output

Overview open is a cross platform package that opens stuff like URLs, files, executables. Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the baseOpen function in index.js, which assembles a PowerShell Start-Process invocation by wrapping each argume...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Management Interoperability Services(CMIS) 3.0.7-IF15

Summary IBM Content Management Interoperability ServicesCMIS 3.0.7-IF15 addresses CVEs related to log4j, neethi and cxf in v3.0.7-IF15 Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j...

VulnCheck KEV: CVE-2024-10441

Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS BSM before 1.1-65374 and Synology DiskStation Manager DSM before 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allows remote attackers to execute arbitrary code via unspecified vectors...

VulnCheck KEV: CVE-2026-13684

An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks...

Improper Encoding or Escaping of Output

Overview @intlify/core-base is a @intlify/core-base Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the escapeParams function in packages/core-base/src/translate.ts, when a translation call passes both list and named interpolation values...