GHSA-XCH3-2F9X-WH9F MLflow has a command injection in mlflow/sagemaker/__init__.py

A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the mlflow/sagemaker/init.py file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization, whic...

CVE-2026-4170

A weakness has been identified in Topsec TopACM 3.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/management/nmcsync.php of the component HTTP Request Handler. Executing a manipulation of the argument templatepath can lead to os command injection. The...

CVE-2026-31386

OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege...

CVE-2026-31386

OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege...

CVE-2026-31386

OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege...

PT-2026-25612

Name of the Vulnerable Software and Affected Versions OpenLiteSpeed and LSWS Enterprise versions affected versions not specified Description OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection issue. An attacker with administrative privileges can...

The vulnerability of the rtw89_set_sar_from_acpi() function in the driver/net/wireless/realtek/rtw89/sar.c file of the Realtek wireless adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtw89setsarfromacpi function in the drivers/net/wireless/realtek/rtw89/sar.c file of the Realtek wireless adapter driver for the Linux operating system is related to improper locking of resources. Exploiting this vulnerability may allow an attacker to cause a service...

The vulnerability of the function rtw89_core_mlsr_switch() in the driver/net/wireless/realtek/rtw89/core.c file of the wireless adapter driver for the Realtek kernel in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtw89coremlsrswitch function in the drivers/net/wireless/realtek/rtw89/core.c file of the Realtek wireless adapter driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the format_show() function in the arch/powerpc/kernel/secvar-sysfs.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the formatshow function in the arch/powerpc/kernel/secvar-sysfs.c module of the PowerPC platform in Linux operating systems is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the iiodebugfs_write_reg() function in the drivers/iio/industrialio-core.c file of various types of embedded sensors in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the iiodebugfswritereg function in the drivers/iio/industrialio-core.c file of various types of embedded sensors in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the s390 kernel component of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the s390 kernel component of the Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ip22zilog component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ip22zilog component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-25954

Name of the Vulnerable Software and Affected Versions IBM Db2 Recovery Expert for Linux, UNIX and Windows version 5.5 IF 2 Description The software contains an insecure mechanism used for verifying data integrity during transmission, which could allow an attacker to modify or corrupt data...

The vulnerability in the capabilities_show() function of the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dmdebugfs.c driver of the Direct Rendering Infrastructure (DRI) graphics card for the Linux operating system allows a attacker to cause a service failure.

The vulnerability in the capabilitiesshow function of the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to incorrect resource initialization. Exploiting this vulnerability can...

EulerOS 2.0 SP10 : python-urllib3 (EulerOS-SA-2026-1348)

According to the versions of the python-urllib3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by...

CVE-2025-14287 Command Injection in mlflow/mlflow

A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the mlflow/sagemaker/init.py file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization, whic...

GHSA-GC25-M8G6-JP4F vulnerabilities

Vulnerabilities for packages: chromium...

Moderate Photon OS Security Update - PHSA-2026-5.0-90-0785

Updates of 'vim' packages of Photon OS have been released...

Security Bulletin: Vulnerability in libxml2 (CVE-2025-8732) affects AIX/VIOS

Summary Updated Mar 13 2026: Added iFix information for VIOS 3.1. Vulnerability in libxml2 could cause an uncontrolled recursion CVE-2025-8732. AIX uses libxml2 as part of its XML parsing functions. Vulnerability Details CVEID:CVE-2025-8732 DESCRIPTION: A vulnerability was found in libxml2 up to...

CVE-2026-25817

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have improper neutralization of special elements used in an OS command allowing remote code execution by attackers with low privilege access on the gateway,...