Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs

Summary IBM Maximo Application Suite - Predict Component uses aiohttp-3.12.14-cp310-cp310-macosx109universal2.whl which are vulnerable to CVE-2026-22815, CVE-2026-34513, CVE-2026-34514, CVE-2026-34515, CVE-2026-34516, CVE-2026-34517, CVE-2026-34518, CVE-2026-34519, CVE-2026-34520, CVE-2026-34525...

CVE-2026-34520 vulnerabilities

Vulnerabilities for packages: airflow, open-webui, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kserve, dask-kubernetes, checkov...

CVE-2026-34520

creationtimestamp| type| source ---|---|--- 2026-04-04 05:16:04+00:00| published-proof-of-concept| Telegram/xPpZj4cibcCYqgi-TPIS6ijPmmH3NCtwSFt5Cz1eCFxQ...

CVE-2026-34520 vulnerabilities

Vulnerabilities for packages: text-generation-inference, awx, checkov, authentik, tritonserver-backend-vllm-cuda-13.0, keep-fips, datahub-ingestion-fips, datahub-ingestion, keep, tritonserver-backend-vllm-cuda-12.9, airflow, kubeflow-pipelines-visualization-server,...

UBUNTU-CVE-2026-34520

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, the C parser the default for most installs accepted null bytes and control characters in response headers. This issue has been patched in version 3.13.4...

CVE-2025-34520

creationtimestamp| type| source ---|---|--- 2025-08-28 15:21:52+00:00| seen| Telegram/s7Iu9fS-Whi-uZZkiAJ1F8204U8xAyiylQQUTKKuDgURnxs...

MAL-2025-34520 Malicious code in tango-ugli-foxtrot-eblpx (npm)

The package tango-ugli-foxtrot-eblpx was found to contain malicious code...

CVE-2024-34520

creationtimestamp| type| source ---|---|--- 2025-02-12 23:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzciyzje52i 2025-02-13 01:10:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4195 2025-02-13 02:25:13+00:00| seen|...

CVE-2024-34520

An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R10240, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls...

CVE-2024-34520

An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R10240, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls...

CVE-2022-34520

creationtimestamp| type| source ---|---|--- 2022-07-22 18:19:32+00:00| seen| https://t.me/cibsecurity/46804...

CVE-2022-34520

Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function rbinfilextrloadbuffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service DOS via a crafted binary file...

CVE-2022-34520

Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function rbinfilextrloadbuffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service DOS via a crafted binary file...

CVE-2022-34520

CVE-2022-34520 affects Radare2 v5.7.2. A NULL pointer dereference in r_bin_file_xtr_load_buffer (bin/bfile.c) may allow a crafted binary to cause Denial of Service. The available sources (NVD, OSV, CNVD, Debian security tracker, Alpine Linux, etc.) corroborate the NULL dereference issue but do no...

CVE-2021-34520

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2021-34520

CVE-2021-34520 concerns a Microsoft SharePoint Server Remote Code Execution vulnerability. The related connected document KB5001975 confirms a security update for SharePoint Server 2019 (16.0.10376.20001) that addresses this vulnerability. The CVE is described with high severity in accompanying m...

CVE-2021-34520 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2021-34520: Deserialization of Untrusted Data

Microsoft SharePoint Server Remote Code Execution Vulnerability...

Security Updates for Microsoft SharePoint Server 2019 (July 2021)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-34467, CVE-2021-34468, CVE-2021-34520 - Microsoft SharePoint Server...

KLA12220 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution...