EUVD-2025-199629

NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33191

NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33191

NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-33191

CVE-2025-33191 affects NVIDIA DGX Spark GB10 OSROOT firmware. The vulnerability is an invalid memory read in OSROOT firmware, with potential denial of service. Public data describes it as a local attack vector (AV:L) with low attack complexity (AC:L) and no user interaction required (UI:N); privi...

PT-2025-41: The Twinkly Light Tree 3D firmware uses a vulnerable Blufi library

The vulnerability was identified in the Twinkly Light Tree 3D firmware, 2.8.18. An attacker within Bluetooth range, with physical access to a device running firmware prior to 2.9.0 and provisioning mode manually re-enabled could, in an attack scenario, interfere with the provisioning exchange and...

NVIDIA DGX Spark 输入验证错误漏洞

The NVIDIA DGX Spark is a personal AI computer from NVIDIA. An input validation error vulnerability exists in NVIDIA DGX Spark GB10, which stems from an invalid memory read in the OSROOT firmware and could lead to a denial of service...

PT-2025-48052

NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read. A successful exploit of this vulnerability might lead to denial of service...

NVIDIA DGX Spark 安全漏洞

The NVIDIA DGX Spark is a personal AI computer from NVIDIA, USA. A security vulnerability exists in NVIDIA DGX Spark GB10, which stems from an arbitrary memory read in the SROOT firmware that could lead to a denial of service...

PT-2025-48053

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...

Redis: Redis is vulnerable to DoS via specially crafted LUA scripts

A vulnerability was found in Redis where an authenticated user to run a crafted Lua script that can read out‑of‑bounds memory or crash the server, leading to information disclosure and denial of service...

CLSA-2025-1763648370 libsoup: Fix of 2 CVEs

CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic...

TencentOS Server 3: tar (TSSA-2023:0096)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0096 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: compat-openssl10 (TSSA-2025:0443)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0443 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Exploit for Improper Input Validation in Amd Ryzen_Master

CVE-2023-20564 - AMD Ryzen Master Driver Physical Memory Acces...

libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49975)

uprobes: vma xoladdvma maps the uninitialized page allocated by createxolarea into userspace. On some architectures x86 this memory is readable even without VMREAD permission. Additionally setting VMEXEC produces the same page protection attributes pgprott as setting both VMEXEC and VMREAD...

Alibaba Cloud Linux 3 : 0178: libssh (ALINUX3-SA-2025:0178)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0178 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-5318: A flaw was found in the libssh libra...

CLSA-2025-1763139862 poppler: Fix of CVE-2025-32365

CVE-2025-32365: fix segmentation fault due to an invalid memory read, occurring in JBIG2Bitmap::combine...

The vulnerability of the perf_output_begin component in Linux operating system kernels allows attackers to compromise the confidentiality of protected information.

The vulnerability of the perfoutputbegin component in Linux operating systems involves reading memory beyond the allocated buffer. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality of the protected information...

Siemens SIMATIC S7-1500 Integer Overflow or Wraparound (CVE-2019-17498)

In libssh2 v1.9.0 and earlier versions, the SSHMSGDISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary out-of-bounds offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a...