Lucene search
+L

12684 matches found

NVD
NVD
•added 2025/11/25 6:15 p.m.•20 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS0.00154EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/11/25 6:07 p.m.•29 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS0.00154EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/25 6:07 p.m.•39 views

CVE-2025-33205

CVE-2025-33205 affects the NVIDIA NeMo Framework. The issue is a vulnerability in a predefined variable that could cause inclusion of functionality from an untrusted control sphere, potentially leading to code execution. Affected component: NVIDIA NeMo Framework (NeMo, various integrations as per...

7.3CVSS7.6AI score0.00154EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/25 6:07 p.m.•12 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7.6AI score0.00154EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/11/25 6:07 p.m.•21 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7.3AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/25 12:00 a.m.•10 views

CVE-2025-33205: Inclusion of Functionality from Untrusted Control Sphere

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7.6AI score0.00154EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/25 12:00 a.m.•24 views

PT-2025-48064

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7.6AI score0.00154EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2025/11/25 12:00 a.m.•15 views

Quantum Key Distribution: Bridging Theoretical Security Proofs, Practical Attacks, and Error Correction for Quantum-Augmented Networks

Quantum Key Distribution QKD is revolutionizing cryptography by promising information-theoretic security through the immutable laws of quantum mechanics. Yet, the challenge of transforming these idealized security models into practical, resilient systems remains a pressing issue, especially as...

7.1AI score
SaveExploits0
Snyk
Snyk
•added 2025/11/24 8:33 p.m.•16 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/24 8:33 p.m.•11 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/24 8:33 p.m.•20 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/24 8:33 p.m.•19 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/24 4:24 p.m.•7 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/24 4:24 p.m.•9 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/11/24 4:24 p.m.•6 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
Ubuntu
Ubuntu
•added 2025/11/24 2:53 p.m.•22 views

USN-7886-1: Python vulnerabilities

It was discovered that Python inefficiently handled expanding system environment variables. An attacker could possibly use this issue to cause Python to consume excessive resources, leading to a denial of service. CVE-2025-6075 Caleb Brown discovered that Python incorrectly handled the ZIP64 End ...

5.5CVSS6.2AI score0.00466EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2025/11/24 1:17 p.m.•245 views

Exploit for PHP External Variable Modification in Juniper Junos

CVE-2023-36845 Ju...

9.8CVSS8.1AI score0.9507EPSS
SaveExploits26
Github Security Blog
Github Security Blog
•added 2025/11/20 3:30 p.m.•32 views

phppgadmin contains an incorrect access control vulnerability

phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters 'subject', 'server', 'database', 'queryid' without proper validation or access...

6.1CVSS6.3AI score0.00209EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2025/11/20 3:17 p.m.•25 views

CVE-2025-13434

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $SERVER'HOST' causes improper neutralization of http headers for scriptin...

7.5CVSS0.00463EPSS
SaveExploits1References4
CVE
CVE
•added 2025/11/19 6:52 p.m.•37 views

CVE-2025-65100

Isar (integration system for automated root filesystem generation) has a vulnerability in versions 0.11-rc1 and 0.11 where defining ISAR_APT_SNAPSHOT_DATE alone fails to set the correct timestamp for security distributions, potentially causing missed security updates. The issue has been patched i...

6.9CVSS5.7AI score0.00371EPSS
SaveExploits0References3
Rows per page
Query Builder