hf-ehr (>=0.1.2, <=0.1.4), mllibprodest (>=1.8.4, <=1.8.5) +2 more potentially affected by CVE-2026-4035 via mlflow (2.11.1)

mlflow PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hf-ehr =0.1.2, =1.8.4, =1.8.5 - pms-encoder 1.1.0 - pollychem 0.1.0 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

CVE-2026-42683: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows DOM-Based XSS. This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.8...

CVE-2026-42762: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows DOM-Based XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through = 1.8.9...

PT-2026-43649

Name of the Vulnerable Software and Affected Versions VikBooking Hotel Booking Engine & PMS versions prior to 1.9.0 Description An improper limitation of a pathname to a restricted directory, known as Path Traversal, allows access to files outside of the intended directory. Recommendations Update...

CVE-2026-42737: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Path Traversal.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through = 1.8.9...

hf-ehr (>=0.1.2, <=0.1.4), mllibprodest (>=1.8.4, <=1.8.5) +2 more potentially affected by CVE-2026-2652 via mlflow (2.11.1)

mlflow PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hf-ehr =0.1.2, =1.8.4, =1.8.5 - pms-encoder 1.1.0 - pollychem 0.1.0 Source cves: CVE-2026-2652 Source advisory: OSV:PYSEC-2026-2221...

hf-ehr (>=0.1.2, <=0.1.4), mllibprodest (>=1.8.4, <=1.8.5) +2 more potentially affected by CVE-2026-2614 via mlflow (2.11.1)

mlflow PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hf-ehr =0.1.2, =1.8.4, =1.8.5 - pms-encoder 1.1.0 - pollychem 0.1.0 Source cves: CVE-2026-2614 Source advisory: OSV:GHSA-42H5-H8QH-VV9V...

hf-ehr (>=0.1.2, <=0.1.4), mllibprodest (>=1.8.4, <=1.8.5) +2 more potentially affected by CVE-2026-33866 via mlflow (2.11.1)

mlflow PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hf-ehr =0.1.2, =1.8.4, =1.8.5 - pms-encoder 1.1.0 - pollychem 0.1.0 Source cves: CVE-2026-33866 Source advisory: OSV:GHSA-46R5-X6JQ-V8G6...

hf-ehr (>=0.1.2, <=0.1.4), mllibprodest (>=1.8.4, <=1.8.5) +2 more potentially affected by CVE-2026-33865 via mlflow (2.11.1)

mlflow PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hf-ehr =0.1.2, =1.8.4, =1.8.5 - pms-encoder 1.1.0 - pollychem 0.1.0 Source cves: CVE-2026-33865 Source advisory: OSV:GHSA-FH64-R2VC-XVHR...

hf-ehr (>=0.1.2, <=0.1.4), mllibprodest (>=1.8.4, <=1.8.5) +2 more potentially affected by CVE-2026-0545 via mlflow (2.11.1)

mlflow PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hf-ehr =0.1.2, =1.8.4, =1.8.5 - pms-encoder 1.1.0 - pollychem 0.1.0 Source cves: CVE-2026-0545 Source advisory: OSV:GHSA-7QHF-V65M-G5F3...

Linux Distros Unpatched Vulnerability : CVE-2018-25224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious value...

CVE-2018-25224 PMS 0.42 Stack-Based Buffer Overflow via Configuration File

PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious values in the configuration file. Attackers can craft configuration files with oversized input that overflows the stack buffer and execute she...

CVE-2018-25224

PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious values in the configuration file. Attackers can craft configuration files with oversized input that overflows the stack buffer and execute she...

CVE-2018-25224: Missing Authentication for Critical Function

PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious values in the configuration file. Attackers can craft configuration files with oversized input that overflows the stack buffer and execute she...

CVE-2026-33408: Missing Authorization

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators were able to see the first 40 characters of post edits in PMs and private categories. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds a...

CVE-2025-50857

ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload...

CVE-2025-50857

ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload...

CVE-2023-25707

Cross-Site Request Forgery CSRF vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin = 1.5.12 versions...

CVE-2025-15152

A vulnerability was identified in h-moses moga-mall up to 392d631a5ef15962a9bddeeb9f1269b9085473fa. This vulnerability affects the function addProduct of the file src/main/java/com/ms/product/controller/PmsProductController.java. Such manipulation of the argument objectName leads to unrestricted...

CVE-2025-15152

A vulnerability was identified in h-moses moga-mall up to 392d631a5ef15962a9bddeeb9f1269b9085473fa. This vulnerability affects the function addProduct of the file src/main/java/com/ms/product/controller/PmsProductController.java. Such manipulation of the argument objectName leads to unrestricted...