EUVD-2025-46560

Malicious code in lisa-serabi55-sukiwir npm...

EUVD-2024-46560

Malicious code in bioql PyPI...

CVE-2024-46560

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pubkey parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-46560

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup...

CVE-2022-46560

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan2Settings module...

CVE-2021-46560

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage...

CVE-2025-46560 vulnerabilities

Vulnerabilities for packages: py3.10-vllm-cuda-11.8...

CVE-2025-46560

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.8.0 and prior to 0.8.5 are affected by a critical performance vulnerability in the input preprocessing logic of the multimodal tokenizer. The code dynamically replaces placeholder tokens...

CVE-2025-46560 vLLM phi4mm: Quadratic Time Complexity in Input Token Processing​ leads to denial of service

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.8.0 and prior to 0.8.5 are affected by a critical performance vulnerability in the input preprocessing logic of the multimodal tokenizer. The code dynamically replaces placeholder tokens...

CVE-2025-46560

CVE-2025-46560 affects vLLM 0.8.0–0.8.4, where the multimodal tokenizer’s input preprocessing uses placeholder tokens replaced by repeated tokens. The replacement logic relies on inefficient list concatenation, yielding quadratic time complexity (O(n²)) and enabling resource exhaustion via crafte...

CVE-2025-46560 vLLM phi4mm: Quadratic Time Complexity in Input Token Processing​ leads to denial of service

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.8.0 and prior to 0.8.5 are affected by a critical performance vulnerability in the input preprocessing logic of the multimodal tokenizer. The code dynamically replaces placeholder tokens...

docext (>=0.1.10, <=0.1.14), genlm-backend (>=0.1.1, <=0.1.3) +2 more potentially affected by CVE-2025-46560 via vllm (>=0.8.3, <=0.8.4)

vllm PYPI version =0.8.3, =0.1.10, =0.1.1, =0.1.1, =0.2.4 - txagent 0.1.3 Source cves: CVE-2025-46560 Source advisory: SNYK:PYTHON-VLLM-10042526...

CVE-2025-46560

creationtimestamp| type| source ---|---|--- 2025-04-29 13:18:40+00:00| published-proof-of-concept| https://github.com/vllm-project/vllm/security/advisories/GHSA-vc6m-hm49-g9qg 2025-04-30 03:50:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnyvdljsau24 2025-04-30 05:22:33+00:00|...

CVE-2022-46560

creationtimestamp| type| source ---|---|--- 2025-04-15 04:54:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11760...

CVE-2024-46560

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pubkey parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46560

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pubkey parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46560

CVE-2024-46560 affects Draytek Vigor 3910 (version 4.3.2.6). The root cause is a buffer overflow in the pub_key parameter handled by the v2x00.cgi endpoint, leading to Denial of Service. Public sources in the provided documents confirm the affected software and vulnerable component, and several t...

CVE-2023-46560

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup...

CVE-2023-46560

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup...

CVE-2023-46560

Summary (CNE): CVE-2023-46560 affects TOTOLINK X2000R Gh, firmware version 1.0.0-B20230221.0948.web. The issue is a stack overflow in the formTcpipSetup function caused by improper input length validation, as described across multiple sources. The consequence is potential arbitrary code execution...