8806 matches found
bernn (>=0.1.3, <=0.3.2), hip-data-ml-utils (1.3.0) +2 more potentially affected by CVE-2026-53995 via mlflow (2.12.1)
mlflow PYPI version 2.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - bernn =0.1.3, =0.3.2 - hip-data-ml-utils 1.3.0 - medroom-ai-dataengineer 0.0.5 - mlflow-cratedb 2.12.1 Source cves: CVE-2026-53995 Source advisory:...
bluemist (>=0.1.2, <=0.1.3), delphai-ml-utils (>=1.0.16, <=1.1.0) +1 more potentially affected by CVE-2026-53995 via mlflow (2.3.2)
mlflow PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - bluemist =0.1.2, =1.0.16, =1.1.0 - mllibprodest 1.5.2 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...
azureml-evaluate-mlflow (>=0.0.14, <=0.0.25), graphmb (0.2.5) +1 more potentially affected by CVE-2026-53995 via mlflow (2.3.1)
mlflow PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.14, =1.0.3, =1.2.5 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...
azureml-evaluate-mlflow (>=0.0.46, <=47.0.0), cogflow (>=1.2.0, <=1.2.13) +5 more potentially affected by CVE-2026-53995 via mlflow (2.10.2)
mlflow PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.46, =1.2.0, =0.0.10, =1.2.7, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQ...
hip-data-ml-utils (>=1.3.3, <=1.4.4), hip-online-store (>=0.1.0, <=0.2.13) +1 more potentially affected by CVE-2026-53995 via mlflow (2.15.0)
mlflow PYPI version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =1.3.3, =0.1.0, =0.1.1, =0.1.5 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...
Fedora 43 : cifs-utils (2026-c2b21d3979)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c2b21d3979 advisory. Fix for CVE-2026-104715. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
Fedora 44 : cifs-utils (2026-7d3c824798)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7d3c824798 advisory. Fix for CVE-2026-104715. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : cifs-utils vulnerability (USN-8938-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has a package installed that is affected by a vulnerability as referenced in the USN-8938-1 advisory. It was discovered that cifs-utils incorrectly handled credentials files used by privileged mount.cifs invocations. A local attacke...
cifs-utils Code Execution
The vulnerability of the CIFS file system mounting utility package provided by cifs-utils relates to the implementation or modification of arguments. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
CLSA-2026-1792442514 cifs-utils: Fix of CVE-2022-27239
CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support...
CLSA-2026-1792442320 cifs-utils: Fix of CVE-2022-27239
CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support...
CVE-2026-112780
Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form fields with replace-name@. Attackers with page-edit permission can smuggle data-@ directives past the callable check to invoke...
CVE-2026-112780
The Grav content management system, versions 2.0.15 before 2.2.2 , is vulnerable to an allowlist bypass that enables arbitrary public static method calls. By renaming Flex form fields with replace-name@, an attacker with page-edit permissions can bypass callable checks to smuggle data-*@ directiv...
CVE-2026-112780 Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@
Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form fields with replace-name@. Attackers with page-edit permission can smuggle data-@ directives past the callable check to invoke...
CVE-2026-112780 Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@
Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form fields with replace-name@. Attackers with page-edit permission can smuggle data-@ directives past the callable check to invoke...
EUVD-2026-104586
Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form fields with replace-name@. Attackers with page-edit permission can smuggle data-@ directives past the callable check to invoke...
USN-8938-1: cifs-utils vulnerability
It was discovered that cifs-utils incorrectly handled credentials files used by privileged mount.cifs invocations. A local attacker could possibly use this issue to inject arbitrary mount options into a privileged mount, resulting in a privilege escalation...
USN-8938-1 cifs-utils vulnerability
It was discovered that cifs-utils incorrectly handled credentials files used by privileged mount.cifs invocations. A local attacker could possibly use this issue to inject arbitrary mount options into a privileged mount, resulting in a privilege escalation...
CVE-2026-112079 hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization
A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function loadword2vecasvocabtensor of the file hanlp/utils/torchutil.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely. The...