42 matches found
Intel OpenVINO Model Server Software Advisory - Lenovo Support US
No description provided...
Intel OpenVINO model server 资源管理错误漏洞
Intel OpenVINO model server is a high-performance AI model servitization platform based on the Intel OpenVINO tool suite from Intel Corporation USA. A resource management error vulnerability exists in Intel OpenVINO model server versions prior to 2024.4, which stems from insufficient control over...
PT-2025-21114 · Intel · Openvino Model Server
Name of the Vulnerable Software and Affected Versions: OpenVINO model server software versions prior to 2024.4 Description: The issue allows an unauthenticated user to potentially enable denial of service via adjacent access due to uncontrolled resource consumption. Recommendations: For versions...
OpenVINO™ Model Server Software Advisory
Summary: A potential security vulnerability in the OpenVINO™ model server software maintained by Intel® may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-22892 Description: Uncontrolled resource...
The vulnerability of Windows COM Server servers allows attackers to gain unauthorized access to protected information.
The vulnerability of Windows COM Server operating system servers is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
OpenVINO™ Model Server Software Advisory
Summary: Potential security vulnerability in the OpenVINO™ model server software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-32048 Description: Improper input validation in the OpenVINO™ Model...
The vulnerability of the deployment and model management software for deep learning in the Intel Distribution of OpenVINO Model Server lies in insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of the deployment and model management software for deep learning in the Intel Distribution of OpenVINO Model Server is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2024-32048
Improper input validation in the IntelR Distribution of OpenVINOTM Model Server software before version 2024.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2024-32048
CVE-2024-32048 affects the Intel OpenVINO Model Server (before 2024.0). The issue is improper input validation that may allow an unauthenticated user to cause a denial of service via adjacent access. Impact is primarily availability (high) with no confidentiality or integrity impact per the CVSS ...
CVE-2024-8939 Vllm: denials of service in vllm json web api
A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...
VulnCheck KEV: CVE-2020-1375
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...
CVE-2023-31203
Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access...
Input validation
Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2023-31203
Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2023-31203
The CVE-2023-31203 issue affects OpenVINO Model Server software prior to version 2022.3. The root cause is improper input validation in the model server component, which may allow an unauthenticated attacker to trigger a denial of service via network access. The advisory and multiple feeds confir...
PT-2023-23228 · Intel · Openvino Model Server
Name of the Vulnerable Software and Affected Versions: OpenVINO Model Server versions prior to 2022.3 Description: The issue is related to improper input validation in the OpenVINO Model Server software, which may allow an unauthenticated user to potentially enable denial of service via network...
Intel® OpenVINO™ Software Advisory
Summary: Potential security vulnerabilities in some Intel® OpenVINO™ software may allow denial of service, information disclosure. Intel is releasing sotfware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25080 Description: Protection mechanism failur...
PyTorch Model Server Registration / Deserialization Remote Code Execution Exploit
The PyTorch model server contains multiple vulnerabilities that can be chained together to permit an unauthenticated remote attacker arbitrary Java code execution. The first vulnerability is that the management interface is bound to all IP addresses and not just the loop back interface as the...
PyTorch Model Server Registration / Deserialization Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/zip' class MetasploitModule 'PyTorch Model Server Registration and Deserialization RCE', 'Description' = %q The PyTorch model server contains multiple...
PyTorch Model Server Registration and Deserialization RCE
The PyTorch model server contains multiple vulnerabilities that can be chained together to permit an unauthenticated remote attacker arbitrary Java code execution. The first vulnerability is that the management interface is bound to all IP addresses and not just the loop back interface as the...