268761 matches found
GHSA-PRG7-HCFM-MFCR vulnerabilities
Vulnerabilities for packages: airflow, mycli, mlflow...
PT-2026-78839
Name of the Vulnerable Software and Affected Versions chenhg5 cc-connect versions prior to 1.4.2 Description Remote code injection is possible through the manipulation of the exec argument within the Authenticate function located in the core/webhook.go file. Recommendations Update to a version...
PT-2026-78741
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user without admin or power roles can achieve Remote Code...
PT-2026-78429
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description The Network Installation Management NIM component contains a flaw where special elements used in OS commands are not properly neutralized. This allows a remote authenticated...
PT-2026-78408
Name of the Vulnerable Software and Affected Versions Renovate versions 43.65.0 through 43.102.10 Description A remote code execution issue exists in the bazel-module and bazelisk managers when the lockFileMaintenance feature is enabled. An attacker can execute arbitrary code by supplying malicio...
PT-2026-78406
Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.8.1 Description The Gremlin query engine contains a flaw where the ArcadeGremlin.executeStatement function silently reverts to an insecure Groovy engine if a request includes any query parameter and the query fail...
PT-2026-78669
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An integer overflow allows a remote attacker to execute arbitrary code. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is...
PT-2026-78400
Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.1.58 Description A remote code execution issue exists in the Repo.init function. The software forwards unsafe git options without proper validation, allowing an attacker to provide a template parameter that points...
CVE-2026-51366
Bottinelli Informatica Vedo Suite v.1.2.5 is affected by a SQL injection vulnerability in the api_vedo/chat endpoint via the utente_chat parameter. A remote, low-privilege attacker can exploit this to achieve arbitrary code execution , resulting in full compromise of confidentiality, integrity, a...
PT-2026-78267
The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCF Abilities Media::register replace-media-file execute callback function in all versio...
Linux Distros Unpatched Vulnerability : CVE-2026-76047
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
PT-2026-78464
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote authenticated attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when the system fai...
PT-2026-78608
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap buffer overflow allows a remote attacker to execute arbitrary code. A heap buffer overflow occurs when a program writes more data to a heap-allocated memor...
Linux Distros Unpatched Vulnerability : CVE-2026-76038
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-76040
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-76046
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute...
OpenJDK 8 <= 8u502 / 11.0.0 <= 11.0.32 / 17.0.0 <= 17.0.20 / 21.0.0 <= 21.0.12 / 25.0.0 <= 25.0.4 / 26.0.0 <= 26.0.2 Multiple Vulnerabilities (2026-08-18)
The version of OpenJDK installed on the remote host is 8 prior to 8u502 / 11.0.0 prior to 11.0.32 / 17.0.0 prior to 17.0.20 / 21.0.0 prior to 21.0.12 / 25.0.0 prior to 25.0.4 / 26.0.0 prior to 26.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026-08-18 advisory...
Linux Distros Unpatched Vulnerability : CVE-2026-76042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory...
Linux Distros Unpatched Vulnerability : CVE-2026-76036
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a...
