23323 matches found
CVE-2024-9880
CVE-2024-9880 is marked as rejected by its CVE Numbering Authority; the connected documents confirm rejection but provide no public technical details (impact, exploit, or fix) in the supplied sources.
PT-2025-12260
Name of the Vulnerable Software and Affected Versions man-group dtale versions = 3.13.1 Description The issue allows for unauthenticated remote command execution via the df.query method when the query engine is set to 'python'. This is due to the query parameters from the request being directly...
PT-2025-12192
Name of the Vulnerable Software and Affected Versions onnx/onnx framework version 1.16.1 and earlier Description A vulnerability in the download model function of the onnx/onnx framework allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar...
PT-2025-12294
Name of the Vulnerable Software and Affected Versions pandas-dev/pandas versions up to and including v2.2.2 Description A command injection issue exists in the pandas.DataFrame.query function, allowing an attacker to execute arbitrary commands on the server by crafting a malicious query. The issu...
GPT Academic 代码问题漏洞
GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a code issue vulnerability that arises from unsafe deserialization of serialized data received from users by the Latex English Error Correction Plugin feature...
CVE-2024-7776: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the downloadmodel function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files i...
AIX : Multiple Vulnerabilities (IJ53929)
The version of AIX installed on the remote host is prior to APAR IJ53929. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53929 advisory. - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due...
AIX : Multiple Vulnerabilities (IJ53923)
The version of AIX installed on the remote host is prior to APAR IJ53923. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53923 advisory. - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due...
AIX : Multiple Vulnerabilities (IJ53792) (deprecated)
The vendor has closed the APAR/removed the security issue. %NASLMINLEVEL 80900 C Tenable, Inc. Disabled on 2026/02/17. Advisory states "Closed" and "Removed security issue." include'compat.inc'; if description scriptid232950; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate...
CVE-2024-56347
IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls...
CVE-2024-56346
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls...
CVE-2024-56346
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls...
CVE-2024-56346
Summary of CVE-2024-56346 and related IBM AIX NIM vulnerabilities. The primary issue involves the nimsh/NIM master service on IBM AIX (NIM master) enabling remote code execution due to improper process controls. Affected products/versions per connected advisories: AIX 7.2 and 7.3, and VIOS 3.1 an...
AIX is vulnerable to arbitrary command execution (CVE-2024-56346 CVE-2024-56347)
IBM SECURITY ADVISORY First Issued: Tue Mar 18 10:46:14 CDT 2025 |Updated: Thu Apr 10 09:01:49 CDT 2025 |Update: The included README was updated for clarity. The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/nimadvisory.asc Security...
FUJISOFT +F FS010M 操作系统命令注入漏洞
FUJISOFT +F FS010M is a wireless router from Fuji Software FUJISOFT Japan. An operating system command injection vulnerability exists in versions prior to FUJISOFT +F FS010M G20V2.0.11101, which stems from an OS command injection issue that could lead to a remote authenticated attacker executing...
CVE-2024-56346: Process Control
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls...
IBM AIX 安全漏洞
IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture by International Business Machines IBM. A security vulnerability exists in IBM AIX versions 7.2 and 7.3, which stems from improper control of the nimsh service SSL/TLS protection mechanism process an...
IBM AIX 安全漏洞
IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture by International Business Machines IBM. A security vulnerability exists in IBM AIX versions 7.2 and 7.3 that stems from improper control of the nimesis NIM master service process, which could allow a...
PT-2025-11630
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 through 7.3 Description The nimsh service SSL/TLS protection mechanisms in IBM AIX could allow a remote attacker to execute arbitrary commands due to improper process controls. Recommendations For IBM AIX versions 7.2...