147 matches found
CVE-2026-43477
In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: Configure VRR timings after enabling TRANSDDIFUNCCTL Apparently ICL may hang with an MCE if we write TRANSVRRVMAX/FLIPLINE before enabling TRANSDDIFUNCCTL. Personally I was only able to reproduce a hang on an Dell X...
Linux Distros Unpatched Vulnerability : CVE-2026-43477
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/vrr: Configure VRR timings after enabling TRANSDDIFUNCCTL Apparently ICL may hang with an MCE if we write TRANSVRRVMAX/FLIPLINE before enabling...
ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-2614 via mlflow (2.16.1)
mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-2614 Source advisory: OSV:GHSA-42H5-H8QH-VV9V...
azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2026-2393 via mlflow (2.7.1)
mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2026-2393 Source advisory: OSV:GHSA-65H7-C7C4-MGHX...
ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-2393 via mlflow (2.16.1)
mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-2393 Source advisory: OSV:PYSEC-2026-2219...
azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2026-33865 via mlflow (2.7.1)
mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2026-33865 Source advisory: OSV:GHSA-FH64-R2VC-XVHR...
ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-33866 via mlflow (2.16.1)
mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-33866 Source advisory: OSV:GHSA-46R5-X6JQ-V8G6...
ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-33865 via mlflow (2.16.1)
mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-33865 Source advisory: OSV:GHSA-FH64-R2VC-XVHR...
azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2026-33866 via mlflow (2.7.1)
mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2026-33866 Source advisory: OSV:PYSEC-2026-94...
ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-33866 via mlflow (2.16.1)
mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-33866 Source advisory: OSV:PYSEC-2026-94...
ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-0545 via mlflow (2.16.1)
mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-0545 Source advisory: OSV:GHSA-7QHF-V65M-G5F3...
CVE-2023-7330: Unrestricted Upload of File with Dangerous Type
Ruijie NBR series routers contain an unauthenticated arbitrary file upload vulnerability via /ddi/server/fileupload.php. The endpoint accepts attacker-supplied values in the name and uploadDir parameters and saves the provided multipart file content without adequate validation or sanitization of...
EUVD-2024-46684
Malicious code in bioql PyPI...
EUVD-2025-23793
Malicious code in bioql PyPI...
EUVD-2025-23795
Malicious code in bioql PyPI...
EUVD-2024-24527
Malicious code in bioql PyPI...
EUVD-2025-12209
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-31612
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where a local user with basic...