Lucene search
+L

8 matches found

OSV
OSV
•added 2026/06/29 11:50 a.m.•22 views

PYSEC-2026-557 Salesforce Uni2TS has a Code Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

9.8CVSS6.1AI score0.00436EPSS
SaveExploits0References8
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•19 views

Salesforce Uni2TS has a Code Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

9.8CVSS6.1AI score0.00436EPSS
SaveExploits0References8Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•73 views

PT-2026-53626

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

9.8CVSS5.8AI score0.00436EPSS
SaveExploits0References9
OSV
OSV
•added 2026/01/09 10:16 p.m.•23 views

CVE-2026-22584

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

9.8CVSS5.8AI score0.00436EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/09 10:16 p.m.•17 views

CVE-2026-22584

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

9.8CVSS0.00436EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/09 10:10 p.m.•54 views

CVE-2026-22584

The Salesforce Uni2TS library, used for Unified Training of Universal Time Series Forecasting Transformers, contains a Code Injection vulnerability (CWE-94) affecting versions through 1.2.0 on MacOS, Windows, and Linux. The root cause is the improper handling of crafted input within the decode_di...

9.8CVSS6AI score0.00436EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2026/01/09 12:00 a.m.•12 views

Salesforce Uni2TS 安全漏洞

Salesforce Uni2TS is a temporal prediction Python library from Salesforce USA. A security vulnerability exists in Salesforce Uni2TS 1.2.0 and prior versions, which stems from improper code generation controls and could lead to the exploitation of executable code in a non-executable file...

9.8CVSS6.9AI score0.00436EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•3 views

CVE-2026-22584: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0...

9.8CVSS6AI score0.00436EPSS
SaveExploits0References1
Rows per page
Query Builder