4248 matches found
PT-2026-2545
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.114 Description The Linux kernel contains a flaw within the IPv4 code path in the ip vs get out rt function. This function can call dst link failure without verifying that skb-dev is set, leading to a NULL...
HPESBHF04969 rev.1 - HPE Compute Scale-up Server 3200 Platform Servers using Certain Intel Processors, INTEL-SA-01249, 2025.2 IPU, Intel Processor Stream Cache Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.55.98 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-20109 |...
CVE-2025-65073
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...
PT-2025-48198
Name of the Vulnerable Software and Affected Versions Ray versions prior to 2.52.0 Description Ray is an AI compute engine that lacks authentication on critical API endpoints, specifically '/api/jobs' and '/api/job agent/jobs/'. This allows remote code execution RCE via a DNS rebinding attack...
Virtuozzo Hybrid Infrastructure 7.0 Hotfix 5 (7.0.0-273)
This update provides important stability fixes. Vulnerability id: VSTOR-115013 A stability fix for libvirt. Vulnerability id: VSTOR-115455 Failed to add a node to the compute cluster. Vulnerability id: VSTOR-118628 Fixed missing FUA write processing on dm-qcow2 and dm-ploop devices...
Google Launches 'Private AI Compute' — Secure AI Processing with On-Device-Level Privacy
Google on Tuesday unveiled a new privacy-enhancing technology called Private AI Compute to process artificial intelligence AI queries in a secure platform in the cloud. The company said it has built Private AI Compute to "unlock the full speed and power of Gemini cloud models for AI experiences,...
HPESBHF04965 rev.1 - Certain HPE ProLiant DL, and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01378, UPLR1 – Intel UEFI Server Firmware Advisory, Multiple Vulnerabilities
Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to 1.5009-05-2025 HPE ProLiant Compute DL340 Gen12 - Prior to 1.5009-05-2025 HPE ProLiant Compute DL360 Gen12 -...
PT-2025-51643
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/amdgpu subsystem that can lead to a GPU page fault after hibernation on PF passthrough environments. Specifically, after resuming from hibernation...
CVE-2025-27070
CVE-2025-27070 is listed under Qualcomm closed-source components as a High-severity issue involving memory corruption during encryption and decryption commands. The available documents identify the vulnerability and its association with Qualcomm closed-source components, but do not provide a spec...
CVE-2025-27070 Out-of-bounds Write in Windows Compute
Memory corruption while performing encryption and decryption commands...
CVE-2025-27070 Out-of-bounds Write in Windows Compute
Memory corruption while performing encryption and decryption commands...
Jailbreaking in the Haystack
Recent advances in long-context language models LMs have enabled million-token inputs, expanding their capabilities across complex tasks like computer-use agents. Yet, the safety implications of these extended contexts remain unclear. To bridge this gap, we introduce NINJA short for...
PT-2025-44922
Name of the Vulnerable Software and Affected Versions Windows Compute affected versions not specified Description A memory corruption issue exists when performing encryption and decryption commands. This can lead to an out-of-bounds write condition. Recommendations At the moment, there is no...
CVE-2025-59503
Server-side request forgery ssrf in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network...
EUVD-2025-35744
Server-side request forgery ssrf in Azure Compute Gallery allows an authorized attacker to elevate privileges over a network...
CVE-2025-59503
Server-side request forgery ssrf in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-59503 Azure Compute Resource Provider Elevation of Privilege Vulnerability
...
CVE-2025-59503
CVE-2025-59503 affects Azure Compute Gallery (Azure Compute Resource Provider). Root cause is SSRF that allows an unauthorized attacker to elevate privileges over the network. Documented impact is privilege escalation with high confidentiality/integrity/availability consequences. Remediation refe...
