Apostrophe Technologies ApostropheCMS has a vulnerability related to improper output processing.

Apostrophe Technologies' ApostropheCMS has a vulnerability in its output processing. This vulnerability stems from the fact that these CAPTCHA integrations insert unencoded response tokens provided by users into provider validation requests. This can lead to request parameter injection, disruptio...

IBM Concert: Vulnerability in output processing

The IBM Concert versions 1.0 to 3.0.0 have a vulnerability related to improper output processing. This vulnerability arises from the improper handling of special elements when writing to log files, which may allow unauthorized users to inject data into log messages...

BIT-JOOMLA-2026-71572 Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2

Joomla! Core - 20260801 - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2 - Lack of output processing allowed a header injection in the multiple download views, leading to reflected file download / content-type confusion...

IBM Concert Software AI Automation Tool Data Access

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the improper processing of output data for registration logs. Exploiting this vulnerability can allow a remote attacker to gain access to and modify this data...

Zabbix SNMP Trap User Interface Replacement

The vulnerability of the snmptrapd daemon in the Zabbix monitoring system is related to improper processing of output data for registration logs. Exploiting this vulnerability allows a remote attacker to replace the user interface...

Dell PowerProtect Data Manager Reporting security vulnerabilities

Dell PowerProtect Data Manager Reporting is a data protection management software. Dell PowerProtect Data Manager Reporting suffers from an improper escape vulnerability that stems from the program's failure to properly process output, no details of the vulnerability are available at this time...

Monitor Component Disclosure Information

The vulnerability of the Monitor component of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, is related to improper processing of output data from registration logs. Exploiting this vulnerability can allow an attacker to disclose...

ansible-core Disclosure Information

The vulnerability of the ansible-core component in the Red Hat Ansible configuration management system is related to incorrect processing of output data for registration logs. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system...

FortiWeb web applications Output Processing

The vulnerability of FortiWeb web applications’ network firewalls is related to improper processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to replace traffic logs through a specially created web page...

SAP ERP Defense Forces Public Security Output Data Log Re-record

The vulnerability of SAP ERP Defense Forces and Public Security software is related to incorrect processing of output data for registration logs. Exploiting this vulnerability can allow a malicious actor to re-record arbitrary files...

FeedDemon vulnerable to arbitrary script execution

Overview FeedDemon is vulnerable to arbitrary script execution. FeedDemon is an RSS/Atom feed reader. FeedDemon is vulnerable to arbitrary script execution due to the improper processing during HTML page output based on feed information when using the "feed preview" option. Daiki Fukumori of Cybe...

Sage vulnerable to arbitrary script execution

Overview Sage is vulnerable to arbitrary script execution. Note that this vulnerability is different from JVN99203127. Sage is an addon for Mozilla Firefox that adds an RSS/Atom feed reader. Sage is vulnerable to arbitrary script execution due to the improper processing during HTML page output...