344 matches found
azureml-designer-classic-modules (>=0.0.127, <=0.0.129), azureml-designer-cv-modules (>=0.0.8, <=0.0.10) +17 more potentially affected by CVE-2023-4863 +1 more via pillow (7.1.0)
pillow PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - azureml-designer-classic-modules =0.0.127, =0.0.8, =0.0.10, =0.0.7, =0.0.7, =0.0.2, =0.3.1, =0.1.1, =0.0.2, =0.0.1, =0.0.4, =0.0.3, =0.1.0 - qweb...
azureml-designer-classic-modules (>=0.0.127, <=0.0.129), azureml-designer-cv-modules (>=0.0.8, <=0.0.10) +17 more potentially affected by CVE-2026-55379 via pillow (7.1.0)
pillow PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - azureml-designer-classic-modules =0.0.127, =0.0.8, =0.0.10, =0.0.7, =0.0.7, =0.0.2, =0.3.1, =0.1.1, =0.0.2, =0.0.1, =0.0.4, =0.0.3, =0.1.0 - qweb...
azureml-designer-classic-modules (>=0.0.127, <=0.0.129), azureml-designer-cv-modules (>=0.0.8, <=0.0.10) +17 more potentially affected by CVE-2026-55798 via pillow (7.1.0)
pillow PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - azureml-designer-classic-modules =0.0.127, =0.0.8, =0.0.10, =0.0.7, =0.0.7, =0.0.2, =0.3.1, =0.1.1, =0.0.2, =0.0.1, =0.0.4, =0.0.3, =0.1.0 - qweb...
cv-depot (>=0.4.2, <=0.12.0), flatiron (>=0.20.1, <=0.26.0) +2 more potentially affected by CVE-2017-9112 via openexr (1.3.8)
openexr PYPI version 1.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on openexr and may be impacted: - cv-depot =0.4.2, =0.20.1, =0.4.0, =0.5.0 Source cves: CVE-2017-9112 Source advisory: OSV:PYSEC-2026-727...
MINI-V5CV-QPV2-V432
Bulletin has no description...
MINI-4GRC-W528-8CV8
Bulletin has no description...
MINI-P5CV-VVP8-FJWG
Bulletin has no description...
CVE-2026-8139
Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.0 with vector...
carbonify (>=0.1.0, <=0.1.1), unity-cv-datasetvisualizer (>=0.0.1, <=0.1.2) potentially affected by CVE-2026-10804 via streamlit (0.84.1)
streamlit PYPI version 0.84.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - carbonify =0.1.0, =0.0.1, =0.1.2 Source cves: CVE-2026-10804 Source advisory: OSV:GHSA-VQWP-45WM-R9R5...
carbonify (>=0.1.0, <=0.1.1), unity-cv-datasetvisualizer (>=0.0.1, <=0.1.2) potentially affected by CVE-2026-10804 via streamlit (0.84.1)
streamlit PYPI version 0.84.1 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - carbonify =0.1.0, =0.0.1, =0.1.2 Source cves: CVE-2026-10804 Source advisory: OSV:PYSEC-2026-212...
SUSE CVE-2018-7712
The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure because size.height = 120 may be false. Note: “OpenCV CVAssert is not an assertion C-like assert, it is regular C++ exception which can...
antimatter (0.1.3), autotrain-advanced (>=0.6.42, <=0.6.44) +12 more potentially affected by CVE-2026-4372 via transformers (4.34.1)
transformers PYPI version 4.34.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - antimatter 0.1.3 - autotrain-advanced =0.6.42, =4.3.0, =1.22.0rc1, =1.0.1, =0.1.69, =0.1.73 - spacy-transformers 1.3.2 Source cves:...
GHSA-PCRH-GJ77-J4MW Concrete CMS is vulnerable to Stored XSS via external-link page cvName
Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized...
CVE-2026-8139
Concrete CMS versions 9.5.0 and earlier are vulnerable to stored XSS on the external-link page cvName due to updateCollectionAliasExternal bypassing sanitization. The issue is triggered by the sanitize bypass in updateCollectionAliasExternal, enabling stored scripts delivered to users. Affected p...
EUVD-2026-30253
The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...
CVE-2026-6271: Unrestricted Upload of File with Dangerous Type
The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...
azureml-designer-classic-modules (>=0.0.127, <=0.0.129), azureml-designer-cv-modules (>=0.0.8, <=0.0.10) +17 more potentially affected by CVE-2026-42308 via pillow (7.1.0)
pillow PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - azureml-designer-classic-modules =0.0.127, =0.0.8, =0.0.10, =0.0.7, =0.0.7, =0.0.2, =0.3.1, =0.1.1, =0.0.2, =0.0.1, =0.0.4, =0.0.3, =0.1.0 - qweb...
azureml-designer-classic-modules (>=0.0.127, <=0.0.129), azureml-designer-cv-modules (>=0.0.8, <=0.0.10) +17 more potentially affected by CVE-2026-42308 via pillow (7.1.0)
pillow PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - azureml-designer-classic-modules =0.0.127, =0.0.8, =0.0.10, =0.0.7, =0.0.7, =0.0.2, =0.3.1, =0.1.1, =0.0.2, =0.0.1, =0.0.4, =0.0.3, =0.1.0 - qweb...
RHEL 9 : containernetworking-plugins (RHSA-2026:9109)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:9109 advisory. The Container Network Interface CNI project consists of a specification and libraries for writing plug- ins for configuring network interfac...