20828 matches found
GHSA-7CX3-6M66-7C5M vulnerabilities
Vulnerabilities for packages: airflow, kubeflow-pipelines-visualization-server, jupyter-base-notebook, tensorflow-cpu-jupyter, dask-kubernetes...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from PEBSENABLE not being masked by vCPU value in perf/x86/intel...
Hugging Face Transformers Regular Expression Denial of Service
A Regular Expression Denial of Service ReDoS exists in the preprocessstring function of the transformers.testingutils module. In versions before 4.50.0, the regex used to process code blocks in docstrings contains nested quantifiers that can trigger catastrophic backtracking when given inputs wit...
GHSA-QQ3J-4F4F-9583 Hugging Face Transformers Regular Expression Denial of Service
A Regular Expression Denial of Service ReDoS exists in the preprocessstring function of the transformers.testingutils module. In versions before 4.50.0, the regex used to process code blocks in docstrings contains nested quantifiers that can trigger catastrophic backtracking when given inputs wit...
PYSEC-2025-40
A vulnerability in the preprocessstring function of the transformers.testingutils module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service ReDoS attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leadin...
CVE-2025-2099
A vulnerability in the preprocessstring function of the transformers.testingutils module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service ReDoS attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leadin...
CVE-2025-2099
CVE-2025-2099 describes a ReDoS in huggingface/transformers v4.48.3 due to a nested-quantifier regex in preprocess_string() within transformers.testing_utils. The issue causes exponential backtracking on input with many newlines, leading to high CPU usage and potential DoS. Connected documents co...
CVE-2025-2099 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
A vulnerability in the preprocessstring function of the transformers.testingutils module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service ReDoS attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leadin...
K000151401: Intel CPU vulnerability CVE-2025-20100
Security Advisory Description Improper access control in the memory controller configurations for some IntelR XeonR 6 processor with E-cores may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2025-20100 Impact There is no impact; F5 products are not...
EulerOS Virtualization 2.12.1 : dhcp (EulerOS-SA-2025-1560)
According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer fr...
SUSE-SU-2025:1567-1 Security update for microcode_ctl
This update for microcodectl fixes the following issues: Intel CPU Microcode was updated to the 20250512 release bsc1243123 - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel Processors may allow an authenticated...
Researchers Expose New Intel CPU Flaws Enabling Memory Leaks and Spectre v2 Attacks
Researchers at ETH Zürich have discovered yet another security flaw that they say impacts all modern Intel CPUs and causes them to leak sensitive data from memory, showing that the vulnerability known as Spectre continues to haunt computer systems after more than seven years. The vulnerability,...
K000151376: Intel CPU vulnerability CVE-2025-20004
Security Advisory Description Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2025-20004 Impact There is no impact; F5...
CVE-2024-21960
Incorrect default permissions in the AMD Optimizing CPU Libraries AOCL installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...
CVE-2024-36339
A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...
Denial Of Service (DoS)
Rack is vulnerable to Denial Of Service DoS. The vulnerability is due to unbounded parameter parsing caused by Rack::QueryParser processing query strings and form-encoded bodies without limiting the number of parameters, allowing attackers to exhaust memory and CPU resources...
Alibaba Cloud Linux 3 : 0212: nghttp2 (ALINUX3-SA-2024:0212)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0212 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-28182: nghttp2 is an implementation of the...
Alibaba Cloud Linux 3 : 0045: pcs (ALINUX3-SA-2025:0045)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0045 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-52804: Tornado is a Python web framework a...
Alibaba Cloud Linux 3 : 0092: linux-firmware (ALINUX3-SA-2024:0092)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0092 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-46329: Protection mechanism failu...