CVE-2026-2256-

CVE-2026-2256- CVE-2026-2256 diagram...

MINI-2256-MG85-CH98

Bulletin has no description...

azureml-designer-classic-modules (>=0.0.127, <=0.0.129), azureml-designer-cv-modules (>=0.0.8, <=0.0.10) +17 more potentially affected by CVE-2026-55380 via pillow (7.1.0)

pillow PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - azureml-designer-classic-modules =0.0.127, =0.0.8, =0.0.10, =0.0.7, =0.0.7, =0.0.2, =0.3.1, =0.1.1, =0.0.2, =0.0.1, =0.0.4, =0.0.3, =0.1.0 - qweb...

OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors

The "create an instance" API in OpenStack Compute Nova Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:ispublic property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for...

PYSEC-2026-862 OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors

The "create an instance" API in OpenStack Compute Nova Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:ispublic property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for...

MINI-2256-QMV4-XPGC

Bulletin has no description...

CVE-2026-2256

A flaw was found in ModelScope, Red Hat AI Inference Server, and Red Hat OpenShift AI. This command injection vulnerability allows a remote attacker to execute arbitrary operating system commands. The exploitation occurs through crafted prompt-derived input, leading to arbitrary code execution on...

CVE-2026-2256

creationtimestamp| type| source ---|---|--- 2026-03-02 23:59:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg4hk5uxjl2d 2026-03-03 03:47:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mg4ubhkdju2w 2026-03-03 10:54:35+00:00| seen|...

CVE-2026-2256

ModelScope's MS-Agent (specifically version v1.5.2 and earlier, including v1.6.0rc1 ) is vulnerable to a command injection flaw in its Shell tool component. The root cause is the improper sanitization of user-influenced input, which is passed directly to a shell execution context at ms_agent/tool...

EUVD-2026-2256

In the Linux kernel, the following vulnerability has been resolved: team: fix check for port enabled in teamqueueoverrideportpriochanged There has been a syzkaller bug reported recently with the following trace: listdel corruption, ffff888058bea080-prev is LISTPOISON2 dead000000000122 -----------...

CVE-2019-2256

An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

EUVD-2020-2256

Malware in sbrugna...

EUVD-2022-2280

Malicious code in bioql PyPI...

CVE-2025-2256

creationtimestamp| type| source ---|---|--- 2025-09-12 17:40:54+00:00| seen| Telegram/gRPzBaApdC9YlpBsXeYzJT7lCwWPufRbI3MCohoFX-bQio...

CVE-2020-2256

Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

MSC-2024-2256

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

CVE-2024-2256

CVE-2024-2256 pertains to the WordPress oik plugin and is a stored XSS via shortcode attributes bw_contact_button and bw_button in versions up to and including 4.10.0. The vulnerability arises from insufficient input sanitization and output escaping on user-supplied attributes, enabling authentic...

Amazon Linux 2 : LibRaw (ALAS-2023-2256)

The version of LibRaw installed on the remote host is prior to 0.19.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2256 advisory. Buffer Overflow vulnerability in LibRaw::stretch function in libraw\src\postprocessing\aspectratio.cpp. CVE-2020-22628 In...

CVE-2023-2256 Product Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site Scripting

The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does not sanitize and escape some URL parameters, leading to Reflected Cross-Site Scripting...

CVE-2023-2256

The CVE-2023-2256 entry covers the WordPress plugin Product Addons & Fields for WooCommerce (PPOM) prior to version 32.0.7. The connected documents confirm a Reflected Cross-Site Scripting vulnerability caused by insufficient sanitization/escaping of URL parameters in the admin panel, enabling ar...