bsh-file-validation (>=0.0.4, <=0.0.21), crewai-files (>=1.11.1.dev20260324, <=1.15.28) +4 more potentially affected by CVE-2026-104266 via tinytag (>=2.1.0, <=2.2.1)

tinytag PYPI version =2.1.0, =0.0.4, =1.11.1.dev20260324, =0.95.0, =0.11.12rc1, =1.128.0, =1.137.0 Source cves: CVE-2026-104266 Source advisory: GHSA-24CC-9352-H2PG...

bsh-file-validation (>=0.0.4, <=0.0.21), crewai-files (>=1.11.1.dev20260324, <=1.15.28) +4 more potentially affected by CVE-2026-104266 via tinytag (>=2.1.0, <=2.2.1)

tinytag PYPI version =2.1.0, =0.0.4, =1.11.1.dev20260324, =0.95.0, =0.11.12rc1, =1.128.0, =1.137.0 Source cves: CVE-2026-104266 Source advisory: OSV:GHSA-24CC-9352-H2PG...

bsh-file-validation (>=0.0.4, <=0.0.21), crewai-files (>=1.11.1.dev20260324, <=1.15.28) +4 more potentially affected by CVE-2026-104266 via tinytag (>=2.1.0, <=2.2.1)

tinytag PYPI version =2.1.0, =0.0.4, =1.11.1.dev20260324, =0.95.0, =0.11.12rc1, =1.128.0, =1.137.0 Source cves: CVE-2026-104266 Source advisory: MEND:CVE-2026-104266...

CVE-2026-56428

The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorizedkeys file for the root user. An attacker in possession of the...

CVE-2026-56428

CVE-2026-56428 affects the SSH service on BSH ELP (Electronic Platform) modules . The root cause is a default, insecure, non-revocable SSH public key stored in the firmware’s authorized_keys, allowing an attacker with the corresponding private key to bypass authentication and achieve root-level a...

CVE-2026-56428: Incorrect User Management

The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorizedkeys file for the root user. An attacker in possession of the...

bsh-file-validation (>=0.0.4, <=0.0.21), kaithem (0.95.0) +2 more potentially affected by CVE-2026-32889 via tinytag (>=2.1.0, <=2.2.0)

tinytag PYPI version =2.1.0, =0.0.4, =0.11.12rc1, =0.11.12 - pyplanet-currentcps 1.1.0 Source cves: CVE-2026-32889 Source advisory: OSV:PYSEC-2026-3386...

bsh-file-validation (>=0.0.4, <=0.0.21), kaithem (0.95.0) +2 more potentially affected by CVE-2026-32889 via tinytag (>=2.1.0, <=2.2.0)

tinytag PYPI version =2.1.0, =0.0.4, =0.11.12rc1, =0.11.12 - pyplanet-currentcps 1.1.0 Source cves: CVE-2026-32889 Source advisory: OSV:GHSA-F4RQ-2259-HV29...

VulnCheck KEV: CVE-2025-34039

A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet bsh.servlet.BshServlet without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java code via the bsh.script parameter. This...

Fedora: Security Advisory for bsh (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: bsh-2.1.0-12.fc40

BeanShell is a small, free, embeddable, Java source interpreter with object scripting language features, written in Java. BeanShell executes standard Java statements and expressions, in addition to obvious scripting commands and syntax. BeanShell supports scripted objects as simple method closure...

bsh-betonbohren.de Improper Access Control vulnerability OBB-3817790

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bsh-betonbohren.de Improper Access Control vulnerability OBB-3766053

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Debian: Security Advisory (DLA-443-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

com.liferay:com.liferay.portal.scripting.beanshell (>=1.0.0, <=2.0.4) potentially affected by CVE-2016-2510 via org.apache-extras.beanshell:bsh (2.0b5)

org.apache-extras.beanshell:bsh MAVEN version 2.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache-extras.beanshell:bsh and may be impacted: - com.liferay:com.liferay.portal.scripting.beanshell =1.0.0, =2.0.4 Source cves: CVE-2016-2510 Sour...

CVE-2016-2510

CVE-2016-2510 is BeanShell deserialization vulnerability: when BeanShell is on the classpath with Java serialization or XStream, crafted serialized data can lead to remote code execution via XThis.Handler. Public docs confirm impact across IBM Emptoris/Contract Management/Program Management suite...

com.liferay:com.liferay.portal.scripting.beanshell (>=1.0.0, <=2.0.4) potentially affected by CVE-2016-2510 via org.apache-extras.beanshell:bsh (2.0b5)

org.apache-extras.beanshell:bsh MAVEN version 2.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache-extras.beanshell:bsh and may be impacted: - com.liferay:com.liferay.portal.scripting.beanshell =1.0.0, =2.0.4 Source cves: CVE-2016-2510 Sour...

CVE-2016-2510: Undefined Security Weakness

BeanShell bsh before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler...

Ubuntu: Security Advisory (USN-2923-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-3504-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...