41 matches found
CVE-2026-24239
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
CVE-2026-24267
NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information...
CVE-2026-24239
NVIDIA NeMo Speech for all platforms contains a vulnerability where processing malicious data created by an attacker can lead to remote code execution . A successful exploit may result in code execution, information disclosure, and data tampering. This issue is associated with CWE-502 (Deserializ...
GHSA-55JH-FWMH-39M4 Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SDK Microsoft.NET.Build.Containers. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A tampering...
Security Bulletin: NVIDIA AIStore Framework - June 2026
NVIDIA has released a software update for NVIDIA® AIStore™ framework. To protect your system, download and install the latest version of the NVIDIA AIStore framework. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update...
GO-2026-5759 go-zserio has Unbounded Memory Allocation for All Platforms in github.com/woven-planet/go-zserio
go-zserio has Unbounded Memory Allocation for All Platforms in github.com/woven-planet/go-zserio...
EUVD-2026-37129
NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...
CVE-2026-10717 Open-Seachest/Seachest show SCSI Defect List Vulnerability
Out of bounds write and reads in openSeaChest’s --showSCSIDefects in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing defect information out of bounds for very large defects lists via a very bad drive with lots of defects or a maliciously crafted SCSI device’s defect...
CVE-2025-60021: Improper Neutralization of Special Elements used in a Command
Remote command injection vulnerability in heap profiler builtin service in Apache bRPC all versions 1.15.0 on all platforms allows attacker to inject remote command. Root Cause: The bRPC heap profiler built-in service /pprof/heap does not validate the user-provided extraoptions parameter and...
CVE-2025-23305
NVIDIA Megatron-LM for all platforms contains a vulnerability in the tools component, where an attacker may exploit a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering...
Security Bulletin: IBM® Db2® is vulnerable to information disclosure and credential exposure to privileged users under specific conditions (CVE-2025-36131)
Summary IBM® Db2® clpplus command exposes user credentials to the terminal which could be obtained by a third party with physical access to the system. Vulnerability Details CVEID:CVE-2025-36131 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server clpplus command exposes...
EUVD-2025-198023
NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...
EUVD-2025-198024
NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...
GO-2025-3998 NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
EUVD-2024-54889
Malicious code in bioql PyPI...
EUVD-2025-25824
Malicious code in bioql PyPI...
EUVD-2025-25828
Malicious code in bioql PyPI...
EUVD-2025-25826
Malicious code in bioql PyPI...