655837 matches found
CVE-2026-119050
Agno versions through 3.1.11 are vulnerable to Code Execution due to an unsafe reflection flaw in PandasTools . The vulnerability occurs when the application uses getattr() with model-controlled function names, allowing an attacker to invoke arbitrary pandas functions. Through prompt injection , ...
CVE-2026-119050 Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr. Attackers can use prompt injection to make the agent call pandas.readpickle on attacker-controlled pat...
CVE-2026-119050
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr. Attackers can use prompt injection to make the agent call pandas.readpickle on attacker-controlled pat...
EUVD-2026-112816
Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke arbitrary pandas functions by supplying model-controlled function names to getattr. Attackers can use prompt injection to make the agent call pandas.readpickle on attacker-controlled pat...
flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
Important: Red Hat Security Advisory: flatpak security update
An update for flatpak is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
flatpak: Flatpak: Arbitrary code execution via missing symlink protection
A flaw was found in Flatpak. A malicious sandboxed application can exploit missing symlink protection during the creation and bind-mounting of app data directories. By manipulating attacker-controlled path components, a malicious symlink can redirect these directories to arbitrary locations on th...
Security Bulletin: IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability (CVE-2026-10859)
Summary IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability due to insecure deserialization of ObjectMessage payloads Vulnerability Details CVEID:CVE-2026-10859 DESCRIPTION: IBM MQ XMS .NET client could allow an authenticated attacker to execute arbitrary code on...
Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2026-10572)
Summary IBM MQ has addressed a denial of service vulnerability due to a heap buffer overflow when processing MQPUT operations with malformed message options Vulnerability Details CVEID:CVE-2026-10572 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or...
Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2026-10574)
Summary IBM MQ has addressed a denial of service vulnerability due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties Vulnerability Details CVEID:CVE-2026-10574 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial o...
Security Bulletin: IBM MQ is affected by an arbitrary code execution vulnerability (CVE-2026-12665)
Summary IBM MQ has addressed an arbitrary code execution vulnerability due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment Vulnerability Details CVEID:CVE-2026-12665 DESCRIPTION: IBM MQ could allow a remote...
Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-12356)
Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability caused by injecting malicious arguments into Ant script commands. Vulnerability Details CVEID:CVE-2026-12356 DESCRIPTION: IBM MQ Managed File Transfer could allow an authenticated user with command queue...
Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-13292)
Summary IBM MQ Managed File Transfer has addressed an arbitrary code execution vulnerability Vulnerability Details CVEID:CVE-2026-13292 DESCRIPTION: IBM MQ Managed File Transfer could allow an authenticated attacker to execute arbitrary code by injecting malicious environment variables through...
Security Bulletin: IBM MQ is affected by a denial of service vulnerability (CVE-2026-12148)
Summary IBM MQ is affected by a denial of service vulnerability due to unrestricted Java deserialization in the MQ Classes for Java Vulnerability Details CVEID:CVE-2026-12148 DESCRIPTION: IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute...
openjdk: Enhance Kerberos validation (Oracle CPU 2026-10)
A flaw was found in OpenJDK's Java Generic Security Services JGSS component. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code within a sandboxed Java environment. Successful exploitation results in unauthorized information disclosure...
CVE-2026-97860
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges...
CVE-2026-103665
The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries DLLs. When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with...
librsvg: Use-after-free when XML includes have duplicated entities
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...
RLSA-2026:90887 Important: emacs security update
GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Arbitrary code execution upon opening a file CVE-2026-96269 For more details...
emacs security update
An update is available for emacs. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNU Emacs is a powerful, customizable, self-documenting text editor. It provid...