374 matches found
aaa-ml-datasets-course (1.0.0), ale-uy (1.5.0) +77 more potentially affected by CVE-2026-40171 via notebook (>=7.0.0, <=7.5.5)
notebook PYPI version =7.0.0, =1.0.1, =0.1.0, =1.6.4b1, =0.0.1, =0.3.1, =0.1.0, =0.0.1, =0.0.2, =1.0.6, =1.1.0 - credalabs-python-toolbox 0.1.1 - docualgo 0.4.2 and more Source cves: CVE-2026-40171 Source advisory: OSV:GHSA-RCH3-82JR-F9W9...
EUVD-2026-23534
radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DWTAGformalparameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute...
CVE-2026-40527
radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DWTAGformalparameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute...
CVE-2026-40527: Improper Neutralization of Special Elements used in an OS Command
radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DWTAGformalparameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute...
aaa-ml-datasets-course (1.0.0), adapters (>=0.2.0, <=0.2.1) +52 more potentially affected by CVE-2026-1839 via transformers (4.39.3)
transformers PYPI version 4.39.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aaa-ml-datasets-course 1.0.0 - adapters =0.2.0, =0.1.0, =0.7.44, =0.1.0, =0.2.1, =0.3.0, =0.1.0, =0.0.5, =0.0.1a0, =0.1.40a0, =0.1.43 -...
CVE-2026-4368
Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway SSL VPN, ICA Proxy, CVPN, RDP Proxy or AAA virtual server leading to User Session Mixup...
CVE-2026-4368
CVE-2026-4368 affects Citrix NetScaler ADC and NetScaler Gateway (14.1-66.54) with a race condition that can cause user session mixups when configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or an AAA vserver. The issue’s base score is 7.7 ( HIGH ) per CVSS v4.0. Remediation: upgrade t...
CVE-2026-4368: Concurrent Execution using Shared Resource with Improper Synchronization
Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway SSL VPN, ICA Proxy, CVPN, RDP Proxy or AAA virtual server leading to User Session Mixup...
aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-33230 via nltk (>=3.0.0, <=3.9.3)
nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-33230 Source advisory: OSV:PYSEC-2026-2235...
CVE-2024-44722
SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd...
CVE-2024-44722: Improper Control of Generation of Code
SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd...
aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-33231 via nltk (>=3.0.0, <=3.9.3)
nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-33231 Source advisory: GHSA-JM6W-M3J8-898G...
aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +802 more potentially affected by CVE-2026-66393 via nltk (>=3.0.0, <=3.9.3)
nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-66393 Source advisory: GHSA-RF74-V2FM-23PW...
EUVD-2026-11145
A vulnerability was found in H3C ACG1000-AK230 up to 20260227. This affects an unknown part of the file /webui/?aaaportalauthlocalsubmit. The manipulation of the argument suffix results in command injection. The attack can be launched remotely. The exploit has been made public and could be used...
aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +801 more potentially affected by CVE-2026-0848 via nltk (>=2.0.4, <=3.9.2)
nltk PYPI version =2.0.4, =0.4.2, =0.2.3, =0.2.0, =0.0.4, =0.0.1, =0.1.0, =0.1.0, =0.0.9, =0.17.0, =0.0.0.dev0, =7.28.2.post5.dev33128883500 and more Source cves: CVE-2026-0848 Source advisory: MEND:CVE-2026-0848...
CLSA-2026-1772644297 Update of ca-certificates
update to CKBI 2.82 from NSS 3.120 - updated certificates: - Certificate "GlobalSign Root CA" - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Comodo AAA Services root" - Certificate "XRamp Global CA Root" - Certificate "Go Daddy Class 2 CA" - Certificate "Starfield Class...
PT-2026-46279
Update ca-certificates database to 20260129: - mozillacertdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.82. - The following certificates were updated: Certificate "GlobalSign Root CA" Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Comodo AAA...
Update of nss
update to CKBI 2.82 from NSS 3.120 - updated certificates: - Certificate "GlobalSign Root CA" - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Comodo AAA Services root" - Certificate "XRamp Global CA Root" - Certificate "Go Daddy Class 2 CA" - Certificate "Starfield Class...
Update of ca-certificates
update to CKBI 2.82 from NSS 3.120 - updated certificates: - Certificate "GlobalSign Root CA" - Certificate "Entrust.net Premium 2048 Secure Server CA" - Certificate "Comodo AAA Services root" - Certificate "XRamp Global CA Root" - Certificate "Go Daddy Class 2 CA" - Certificate "Starfield Class...
