102 matches found
Astra Linux – Vulnerability in twitter-bootstrap3
A security vulnerability has been discovered in Bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is related to the “data-loading-text” attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into this attribute,...
Security Bulletin: Due to use of bootstrap, IBM License Key Server Administration and Reporting Tool is affected by Cross-site scripting
Summary IBM License Key Server Administration and Reporting Tool uses bootstrap javascript library internally. Vulnerability Details CVEID:CVE-2025-1647 DESCRIPTION: Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows...
Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities in bootstrap-3.4.1.tgz client library
Summary Vulnerabilities have been identified in bootstrap-3.4.1.tgz , which is used in IBM Engineering Lifecycle Management -Engineering Workflow Management Vulnerability Details CVEID:CVE-2024-6484 DESCRIPTION: Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript i...
The vulnerability of the library for acceleration of data loading and preprocessing in NVIDIA DALI, related to deficiencies in the deserialization mechanism, allows a hacker to execute arbitrary code.
The vulnerability of the library for acceleration of data loading and preprocessing in NVIDIA DALI is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Cleanlab Deserialization of Untrusted Data vulnerability
Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously crafted datalab.pkl file to run arbitrary code on an end user’s system when the data directory is loaded...
PYSEC-2026-597
NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issue 3504. The UNSAFENOPROTOCOLRE regex in nltk/data.py checks for literal ../ sequences but fails to account for percent-encoded traversal sequences such as ..%2f. The url2pathname function decodes...
CVE-2026-24215
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...
PT-2026-45457
An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files. The affected components load model files from session directories using torch.load with unrestricted deserialization...
EUVD-2026-31053
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-24215
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend that could allow an attacker to cause uncontrolled resource consumption, potentially leading to denial of service. Affected: Triton Inference Server (DALI backend). CVSS from NVIDIA security bulletin shows CVSSv3.1 5.7 (M...
EUVD-2026-31055
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or information disclosure...
CVE-2026-24213
The CVE-2026-24213 entry concerns NVIDIA Triton Inference Server’s DALI backend, where an out-of-bounds read is possible due to a vulnerability in that backend. Affected component: DALI backend within Triton Inference Server. Reported impacts include code execution, data tampering, denial of serv...
NVIDIA DALI 代码问题漏洞
NVIDIA DALI is a data loading and preprocessing library developed by NVIDIA Corporation in the United States. NVIDIA DALI has code-related vulnerabilities; these vulnerabilities stem from the possibility of deserializing unreliable data, which may lead to the execution of arbitrary code...
SUSE CVE-2026-34447
Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0...
CVE-2026-34447
A flaw was found in Open Neural Network Exchange ONNX. This symlink traversal vulnerability in external data loading allows a local attacker to read sensitive files outside the intended model directory. By tricking a user into loading a specially crafted ONNX model, an attacker can gain...
EUVD-2026-17989
ONNX: External Data Symlink Traversal...
DEBIAN-CVE-2026-34447
Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0...
PYSEC-2026-104
Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0...
PYSEC-2026-104
Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0...