cumulus

OWASP Cumulus - クラウドの脅威モデリング Cumulus は、クラウドおよび devOps チームにセキュリティをもたらす簡単な方法です。 Elevation of Privilege というカードゲームの一種として、ゲーミフィケーションによってシステムの脅威モデリングを行うというアイデアに従っています。 この軽量で参入障壁の低いアプローチは、devOps またはクラウドプロジェクトの脅威を見つけるのに役立ち、開発者にセキュリティ指向の考え方を教えます。 最新のリリースはこちらです。 脅威モデリング シリアスゲームによる脅威モデリングのアイデアは、Adam Shostac...

cumulus

アプリケーション脆弱性監視ソフトウェア Cumulusとは Cumulusは、セキュリティの脆弱性をリアルタイムで監視し修正するためのサービスです。問題はWebダッシュボードで報告されます。非常にシンプルで強力です。 主な機能 SDKをWebフロントにインストールするだけで、サービス上のセキュリティ脆弱性を検出できます。 SDKは内部レイヤーから動的に脆弱性を検出します（例：DOMイベント、XHRリクエスト） Scannerは外部レイヤーから静的に脆弱性を検出します（例：Webクローリングベースの解析） 追加で検出できる脆弱性があれば、SDKまたはScannerに貢献してください。...

CVE-2026-24183

NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2026-24184

NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol LLDP daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution...

CVE-2026-24183

The Initial Description provides concrete technical details: the affected product is NVIDIA Cumulus Linux, the vulnerable component is the user management module, the root cause is improper privilege management, and the impact is local privilege escalation (CVSS 7.8 HIGH). No fix version or explo...

CVE-2026-24184

NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol LLDP daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution...

EUVD-2026-61104

NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol LLDP daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution...

CVE-2026-24184

An unauthenticated attacker on an adjacent network can trigger a buffer overflow in the LLDP daemon of NVIDIA Cumulus Linux via crafted LLDP frames, potentially leading to code execution. CVSS 3.1 scores this HIGH (7.5) with no privileges required; exploitation details are not publicly available....

CVE-2026-24183

NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges...

EUVD-2026-61103

NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-33179

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized command. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-33181

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-33180

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-33181

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-33179

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized command. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-33180

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-33179

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could run an unauthorized command. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-33180

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-33181

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges...

CVE-2025-33181

NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges...