10906 matches found
NVIDIA KAI Scheduler 访问控制错误漏洞
NVIDIA KAI Scheduler is an AI-based computing task scheduling system developed by NVIDIA Corporation. NVIDIA KAI Scheduler has a vulnerability related to access control, which stems from unauthorized access to API endpoints, potentially leading to information leakage...
Security Bulletin: NVIDIA CUDA-Q - April 2026
NVIDIA has released a software update for NVIDIA® CUDA-Q. To protect your system, clone or update this software to CUDA-Q v0.14.0 or later from CUDA-Q on GitHub. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses...
GHSA-P3P7-9H4W-JQW2 vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-13.2, kubeflow-katib...
CVE-2025-22873 vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-13.2, kubeflow-katib...
USN-8148-7: Linux kernel (NVIDIA) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; CVE-2026-23060, CVE-2026-23074, CVE-2026-23111...
NVIDIA Networking VIRTIO-Net, SNAP4 Vulnerabilities - Lenovo Support US
No description provided...
NVIDIA B300 MCU Vulnerability - Lenovo Support US
No description provided...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: kine, prometheus-operator, telegraf, k3s, prometheus, kubernetes-dashboard, istio, go, cloud-provider-aws, aws-flb-cloudwatch, aactl, aws-flb-kinesis, cilium-cli, redka, external-dns, kubernetes, kyverno, runc, snyk-cli, newrelic-fluent-bit-output, argo-cd, gitlab-ka...
GHSA-XJ38-JXC5-RPPX vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis, falco-no-driver, gitlab-kas-fips, azure-aad-pod-identity-mic, azurefile-csi, terraform, rke2-runtime, kaf, nemo, cilium-envoy, buildkite-agent-fips, cluster-autoscaler-fips, mattermost-fips, istio, azuredisk-csi-fips, gitlab-pages, argo-workflows,...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: aws-flb-kinesis, falco-no-driver, gitlab-kas-fips, azure-aad-pod-identity-mic, azurefile-csi, terraform, rke2-runtime, kaf, nemo, cilium-envoy, buildkite-agent-fips, cluster-autoscaler-fips, mattermost-fips, istio, azuredisk-csi-fips, gitlab-pages, argo-workflows,...
GHSA-5W89-2C2X-6X66 vulnerabilities
Vulnerabilities for packages: step, cert-manager-cmctl, cert-manager-csi-driver-fips, dgraph, hcl2json, listmonk, rqlite, crossplane-function-auto-ready, kubescape-operator-fips, k8ssandra-client-fips, aws-flb-firehose, prometheus-postgres-exporter-fips, livekit-egress, go-bindata, longhorn-engin...
SUSE-SU-2026:21016-1 Security update for util-linux
This update for util-linux fixes the following issues: Security issues: - CVE-2025-14104: heap buffer overread in setpwnam when processing 256-byte usernames bsc1254666. - CVE-2026-3184: access control bypass due to improper hostname canonicalization in login bsc1258859. Non security issues: -...
SUSE-SU-2026:21158-1 Security update for util-linux
This update for util-linux fixes the following issues: Security issues: - CVE-2025-14104: heap buffer overread in setpwnam when processing 256-byte usernames bsc1254666. - CVE-2026-3184: access control bypass due to improper hostname canonicalization in login bsc1258859. Non security issues: -...
OPENSUSE-SU-2026:20495-1 Security update for util-linux
This update for util-linux fixes the following issues: Security issues: - CVE-2025-14104: heap buffer overread in setpwnam when processing 256-byte usernames bsc1254666. - CVE-2026-3184: access control bypass due to improper hostname canonicalization in login bsc1258859. Non security issues: -...
Ubuntu: Security Advisory (USN-8148-5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2026-24174
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful exploit of this vulnerability might lead to denial of service...
Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems
Artificial Intelligence AI company Anthropic announced a new cybersecurity initiative called Project Glasswing that will use a preview version of its new frontier model, Claude Mythos , to find and address security vulnerabilities. The model will be used by a small set of organizations, including...
EUVD-2026-19757
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful exploit of this vulnerability might lead to denial of service...
EUVD-2026-19749
NVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a large number of outputs could cause a server crash. A successful exploit of this vulnerability might lead to denial of service...