27 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-9906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a...
CVE-2026-9906
Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in keras-2.13.1-py3-none-any.whl
Summary IBM Watson Discovery Cartridge affected by vulnerability in keras-2.13.1-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-9906 DESCRIPTION: The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially craft...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses keras-3.10.0-py3-none-any.whl, keras-2.14.0-py3-none-any.whl which are vulnerable to CVE-2025-12058, CVE-2025-12060, CVE-2025-9905, CVE-2025-9906.
Summary IBM Maximo Application Suite - Monitor Component uses keras-3.10.0-py3-none-any.whl, keras-2.14.0-py3-none-any.whl which are vulnerable to CVE-2025-12058, CVE-2025-12060, CVE-2025-9905, CVE-2025-9906. This bulletin contains information regarding the vulnerability and its fixture...
Linux Distros Unpatched Vulnerability : CVE-2025-9906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .keras model...
CVE-2025-9906
The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .keras model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special...
a2grunnerp (>=0.1.0 <=0.1.8), a62-emotion (>=0.9.2 <=0.11.4) +1263 more potentially affected by CVE-2025-9906 via keras (>=1.2.1 <=3.10.0)
keras PYPI version =1.2.1, =0.1.0, =0.9.2, =1.0.1, =0.1.0, =1.1.2, =0.0.8, =0.0.1, =7.13.1, =0.0.1, =0.0.2 and more Source cves: CVE-2025-9906 Source advisory: OSV:GHSA-36FQ-JGMW-4R9C...
CVE-2025-9906
creationtimestamp| type| source ---|---|--- 2025-09-19 09:22:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz6k3g5whz2c...
decima2 (>=0.1.0 <=0.2.1), gpbench (>=1.0.3 <=1.2.2) +8 more potentially affected by CVE-2025-9906 via keras (>=3.0.0 <=3.10.0)
keras PYPI version =3.0.0, =0.1.0, =1.0.3, =0.0.28, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.0.0, =1.2.0 Source cves: CVE-2025-9906 Source advisory: SNYK:PYTHON-KERAS-12927178...
CVE-2025-9906 Arbitrary Code execution in Keras Safe Mode
The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .keras model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special...
CVE-2025-9906
The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .keras model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special...
MAL-2025-9906 Malicious code in @zalastax/nolb-_dank (npm)
The package @zalastax/nolb-dank was found to contain malicious code...
CVE-2024-9906
creationtimestamp| type| source ---|---|--- 2024-10-13 07:12:59+00:00| seen| https://t.me/cvedetector/7779 2024-10-13 14:10:43+00:00| seen| https://t.me/HackerArsenal/548...
CVE-2024-9906 SourceCodester Online Eyewear Shop cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attac...
SUSE CVE-2014-9906
Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service program crash or possibly execute arbitrary code via vectors related to a lost server connection...
CVE-2020-9906
CVE-2020-9906 (Apple iOS/macOS/watchOS) - AWDL SyncTree TLV heap overflow, remote kernel impact The issue arises in the iOS/macOS AWDL kernel parser (IO80211AWDLPeer). The SyncTree TLV (type 0x14) length is validated with a 1024-byte upper bound when TLVs are parsed, but the code copies 6-byte MA...
CVE-2017-9906
CVE-2017-9906 affects XnView Classic for Windows (version 2.40). The vulnerability is triggered by a crafted .fpx image file, leading to denial of service and possibly unspecified other impact due to a flaw where Data from Faulting Address is used as arguments in a later function call inside Xfpx...
CVE-2016-9906
This CVE entry is rejected/not used; the candidate number was not associated with any vulnerability.
Ubuntu 14.04 LTS : DBD::mysql vulnerabilities (USN-3103-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3103-1 advisory. It was discovered that DBD::mysql incorrectly handled certain memory operations. A remote attacker could use this issue to cause DBD::mysql to crash,...