3 matches found
CVE-2026-15661: Improper Output Neutralization for Logs
IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...
5.3CVSS5.8AI score0.00242EPSS
SaveExploits0References2
EUVD-2022-41789
Malicious code in bioql PyPI...
5.4CVSS6.5AI score0.07106EPSS
SaveExploits4References6
httpd: insufficient escaping of user-supplied data in mod_ssl
A vulnerability was found in the Apache HTTP Server. Insufficient escaping of user-supplied data in modssl allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to...
7.5CVSS7.1AI score0.00795EPSS
SaveExploits0References5
20