Lucene search
+L

949 matches found

NVD
NVD
•added 2025/12/23 9:15 p.m.•16 views

CVE-2025-14929

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this...

7.8CVSS0.00369EPSS
SaveExploits0References1
PyPA
PyPA
•added 2025/12/23 9:15 p.m.•89 views

PYSEC-2025-217

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this...

7.8CVSS8AI score0.00369EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2025/12/23 9:04 p.m.•17 views

CVE-2025-14929 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this...

7.8CVSS8AI score0.00369EPSS
SaveExploits0References3
Mend
Mend
•added 2025/12/23 9:04 p.m.•2 views

CVE-2025-14929

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this...

8.5CVSS8AI score0.00369EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/23 9:04 p.m.•68 views

CVE-2025-14929

CVE-2025-14929 concerns Hugging Face Transformers (X-CLIP) checkpoint conversion. The vulnerability stems from improper validation during checkpoint parsing, enabling deserialization of untrusted data and resulting in remote code execution in the process that handles the file. Attacker interactio...

7.8CVSS8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/12/23 9:04 p.m.•62 views

CVE-2025-14929 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this...

7.8CVSS0.00369EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/23 12:00 a.m.•4 views

CVE-2025-14929: Deserialization of Untrusted Data

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this...

7.8CVSS8AI score0.00369EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/23 12:00 a.m.•21 views

Hugging Face Transformers code issue vulnerabilities

Hugging Face Transformers is a Hugging Face open source framework for defining state-of-the-art machine learning models covering textual, visual, audio, and multimodal models for inference and training. A code issue vulnerability exists in Hugging Face Transformers that stems from a lack of...

7.8CVSS7.8AI score0.00369EPSS
SaveExploits0References1
Wired Threat Level
Wired Threat Level
•added 2025/12/22 11:34 p.m.•26 views

The ‘Epstein’s Suicide’ Video in the Latest DOJ Release Isn’t What It Seems

Here’s how a fake clip from 2019 wound up in the latest Justice Department Epstein files dump...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•14 views

PT-2025-52386

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers affected versions not specified Description A flaw exists in Hugging Face Transformers related to the parsing of checkpoints, allowing remote attackers to execute arbitrary code. The issue stems from insufficient...

7.8CVSS7.9AI score0.00369EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2025/12/08 1:16 a.m.•14 views

DEBIAN-CVE-2025-40304

In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bitputcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering text near screen edges. Return early if the Y position is off-screen and clip...

7.8CVSS6.6AI score0.00144EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/08 1:16 a.m.•27 views

CVE-2025-40304

In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bitputcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering text near screen edges. Return early if the Y position is off-screen and clip...

7.8CVSS0.00144EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/12/08 12:46 a.m.•51 views

CVE-2025-40304 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds

In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bitputcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering text near screen edges. Return early if the Y position is off-screen and clip...

7.8CVSS0.00144EPSS
SaveExploits0References8
AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•12 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: atm: clip: preventing NULL dereferencing in clippush The committed code failed to account for the fact that vccDestroySocket calls clippush with a NULL skb. If clipdevs is NULL, clippush crashes when reading skb-truesize...

5.5CVSS6.2AI score0.00178EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2021-23943

Malware in sbrugna...

5.4CVSS6AI score0.00566EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2016-1602

Malware in sbrugna...

7.1CVSS6AI score0.00498EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2017-4656

Malware in sbrugna...

9.8CVSS7.1AI score0.03823EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-1390

Malware in sbrugna...

7.8CVSS7.4AI score0.0197EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2019-5261

Malware in sbrugna...

7.8CVSS7.3AI score0.00814EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2019-5264

Malware in sbrugna...

10CVSS7.5AI score0.00953EPSS
SaveExploits0References2
Rows per page
Query Builder