#cwe-134

共收录 46 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布INFO

Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol. In affected versions, a low-privileged authenticated `NETCONF` user can ...

CVE-2026-63201

Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol. In affected ver

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-85842

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privile

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83585

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-01 发布INFO

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the ...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute ar

历史摘要 · 未重新核验 · NVD

安全公告2026-09-23 发布INFO

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting...

CVE-2026-84691

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log messa

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-23 发布INFO

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log message emitted for API 4XX errors is an administrator-control...

CVE-2026-84691

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log messa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professional: fr...

CVE-2026-18461

Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format Stri

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network.

CVE-2026-69395

Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacke

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerabil...

CVE-2026-73782

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote c

历史摘要 · 未重新核验 · NVD

安全公告2026-08-29 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated...

CVE-2026-16821

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format s

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-28 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format string vulnerability.

CVE-2026-16821

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a format s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. ...

CVE-2026-81574

In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to `ERR_raise_data()`. Impact summary: A ma...

CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the f

历史摘要 · 未重新核验 · NVD

安全公告2026-08-21 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary...

CVE-2026-17136

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format st

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-20 发布INFO

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format string vulnerability.

CVE-2026-17136

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format st

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or...

CVE-2026-68553

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can pla

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a local attacker to obtain sensitive information or cause ...

CVE-2026-15961

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 IBM PowerVM could allow a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a forma...

CVE-2026-12004

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Ident

历史摘要 · 未重新核验 · NVD

安全公告2026-07-30 发布INFO

A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs...

CVE-2026-18188

A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-30 发布INFO

A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability...

CVE-2026-18187

A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-control

历史摘要 · 未重新核验 · GitHub Advisory