18554 matches found
PT-2025-12260
Name of the Vulnerable Software and Affected Versions man-group dtale versions = 3.13.1 Description The issue allows for unauthenticated remote command execution via the df.query method when the query engine is set to 'python'. This is due to the query parameters from the request being directly...
GPT Academic Code Issues and Vulnerabilities
GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a code issue vulnerability that arises from unsafe deserialization of serialized data received from users by the Latex English Error Correction Plugin feature...
PT-2025-12294
Name of the Vulnerable Software and Affected Versions pandas-dev/pandas versions up to and including v2.2.2 Description A command injection issue exists in the pandas.DataFrame.query function, allowing an attacker to execute arbitrary commands on the server by crafting a malicious query. The issu...
PT-2025-12192
Name of the Vulnerable Software and Affected Versions onnx/onnx framework version 1.16.1 and earlier Description A vulnerability in the download model function of the onnx/onnx framework allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar...
CVE-2024-7776: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the downloadmodel function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files i...
AIX : Multiple Vulnerabilities (IJ53929)
The version of AIX installed on the remote host is prior to APAR IJ53929. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53929 advisory. - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due...
AIX : Multiple Vulnerabilities (IJ53792) (deprecated)
The vendor has closed the APAR/removed the security issue. %NASLMINLEVEL 80900 C Tenable, Inc. Disabled on 2026/02/17. Advisory states "Closed" and "Removed security issue." include'compat.inc'; if description scriptid232950; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate...
AIX : Multiple Vulnerabilities (IJ53923)
The version of AIX installed on the remote host is prior to APAR IJ53923. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53923 advisory. - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due...
CVE-2024-56346
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls...
CVE-2024-56346
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls...
CVE-2024-56347
IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls...
CVE-2024-56346
Summary of CVE-2024-56346 and related IBM AIX NIM vulnerabilities. The primary issue involves the nimsh/NIM master service on IBM AIX (NIM master) enabling remote code execution due to improper process controls. Affected products/versions per connected advisories: AIX 7.2 and 7.3, and VIOS 3.1 an...
AIX is vulnerable to arbitrary command execution (CVE-2024-56346 CVE-2024-56347)
IBM SECURITY ADVISORY First Issued: Tue Mar 18 10:46:14 CDT 2025 |Updated: Thu Apr 10 09:01:49 CDT 2025 |Update: The included README was updated for clarity. The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/nimadvisory.asc Security...
IBM AIX security vulnerabilities
IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture by International Business Machines IBM. A security vulnerability exists in IBM AIX versions 7.2 and 7.3 that stems from improper control of the nimesis NIM master service process, which could allow a...
IBM AIX security vulnerabilities
IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture by International Business Machines IBM. A security vulnerability exists in IBM AIX versions 7.2 and 7.3, which stems from improper control of the nimsh service SSL/TLS protection mechanism process an...
PT-2025-11630
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 through 7.3 Description The nimsh service SSL/TLS protection mechanisms in IBM AIX could allow a remote attacker to execute arbitrary commands due to improper process controls. Recommendations For IBM AIX versions 7.2...
PT-2025-11997
Name of the Vulnerable Software and Affected Versions Apache Log4j affected versions not specified Description The issue is related to a remote command execution vulnerability. No specific details about affected devices or real-world incidents are provided. Recommendations At the moment, there is...
PT-2025-11629
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 Description The IBM AIX nimesis NIM master service has a flaw in its process controls that could allow a remote attacker to execute arbitrary commands. This issue is actively exploited. The vulnerability affects th...
CVE-2024-56347: Process Control
IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls...