310 matches found
Go crypto/tls Disclosure
The vulnerability of the crypto/tls component in the Go programming language is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs
Summary Users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape e.g. hidden dimension is wrong, regardless of whether the model is intended to support such inputs as defined in the Supported Models page. The issue has...
Xen security vulnerabilities
Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A security vulnerability exists in Xen that stems from a...
Agentic AI’s OODA Loop Problem
The OODA loop --for observe, orient, decide, act--is a framework to understand decision-making in adversarial situations. We apply the same framework to artificial intelligence agents, who have to make their decisions with untrustworthy observations and orientation. To solve this problem, we need...
Denial Of Service (DoS)
xgrammar is vulnerable to Denial Of Service DoS. The vulnerability is due to a regression in the Earley parser, which causes excessive processing time for valid grammar inputs, allowing an attacker to exploit this inefficiency to trigger denial of service through resource exhaustion...
EUVD-2020-27388
Malware in sbrugna...
EUVD-2018-10923
Malware in sbrugna...
EUVD-2020-6642
Malware in sbrugna...
EUVD-2024-39871
Malicious code in bioql PyPI...
EUVD-2024-53554
Malicious code in bioql PyPI...
EUVD-2024-34879
Malicious code in bioql PyPI...
EUVD-2025-10492
Malicious code in bioql PyPI...
EUVD-2022-49685
Malicious code in bioql PyPI...
EUVD-2022-49683
Malicious code in bioql PyPI...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the elfswapshdr function in bfd/elfcode.h of the Linker component. An attacker can execute arbitrary code or cause a denial of service by providing crafted input that triggers a heap-based buffer overflow...
php: Single byte overread with convert.quoted-printable-decode filter
A memory-related vulnerability was found in PHP’s filter handling system, particularly when processing input with convert.quoted-printable-decode filters. This issue can lead to a segmentation fault. This vulnerability is triggered through specific sequences of input data, causing PHP to crash...
Microsoft Exchange Server Spoofing
The vulnerability of Microsoft Exchange Server is related to improper validation of syntax correctness in input data. Exploiting this vulnerability allows a malicious actor to perform spam attacks remotely...
CVE-2025-3753
The CVE-2025-3753 issue affects the ROS rosbag tool, specifically ROS Noetic Ninjemys and earlier. The root cause is the use of Python’s eval() to process unsanitized, user-supplied input within the rosbag filter command, enabling potential arbitrary Python code execution. Documents consistently ...
