picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards...
CVE-2025-71353
picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder.get funct
#severity:high
共收录 5441 条相关情报。
← 返回所有主题picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start...
CVE-2025-71364
picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle redu
picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files,...
CVE-2025-71373
picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to byp
picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity...
CVE-2025-71360
picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity function in reduce meth
The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the...
CVE-2025-71380
The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n ru
picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2...
CVE-2025-71359
picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in t
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran...
CVE-2025-71362
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbi
picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran...
CVE-2025-71347
picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran.param_eval function in red
picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive...
CVE-2025-71342
picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive.runcode in reduce methods. A
picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv...
CVE-2025-71356
picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expres
picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen...
CVE-2025-71343
picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen.ParserGenerator.make_lab
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an...
CVE-2026-58299
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execu
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft...
CVE-2026-58298
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)...
CVE-2026-58290
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-58292
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code...
CVE-2026-58294
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized...
CVE-2026-58293
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-58286
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)...
CVE-2026-58285
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to...
CVE-2026-58284
Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network