Lucene search
+L

20156 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-22589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS...

6.1CVSS6.5AI score0.02005EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2025/08/26 11:26 p.m.6 views

SUSE CVE-2024-58239

In the Linux kernel, the following vulnerability has been resolved: tls: stop recv if initial processrxlist gave us non-DATA If we have a non-DATA record on the rxlist and another record of the same type still on the queue, we will end up merging them: - processrxlist copies the non-DATA record -...

7CVSS6.5AI score0.00339EPSS
SaveExploits2References35
NVD
NVD
added 2025/08/26 7:15 p.m.8 views

CVE-2025-23314

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

7.8CVSS0.0024EPSS
SaveExploits0References3
OSV
OSV
added 2025/08/26 7:15 p.m.7 views

CVE-2025-23313

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

7.8CVSS7.4AI score
SaveExploits0References3
Cvelist
Cvelist
added 2025/08/26 6:30 p.m.21 views

CVE-2025-23314

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

7.8CVSS0.0024EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/08/26 6:30 p.m.3 views

CVE-2025-23314

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

7.8CVSS7.5AI score0.0024EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/08/26 6:30 p.m.14 views

CVE-2025-23313

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

7.8CVSS0.00246EPSS
SaveExploits0References3
CVE
CVE
added 2025/08/26 6:30 p.m.34 views

CVE-2025-23313

Summary (CVE-2025-23313) : NVIDIA NeMo Framework (NLP component) across platforms is described as vulnerable to code injection via malicious data. The underlying root cause is not detailed in the provided documents, but the consequence could include code execution, privilege escalation, informati...

7.8CVSS7AI score0.00246EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/26 6:30 p.m.5 views

CVE-2025-23313

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

7.8CVSS7.5AI score0.00246EPSS
SaveExploits0References3
OSV
OSV
added 2025/08/26 4:19 p.m.10 views

GHSA-8MVJ-3J78-4QMW jsPDF Denial of Service (DoS)

Impact User control of the first argument of the addImage method results in CPU utilization and denial of service. If given the possibility to pass unsanitized image data or URLs to the addImage method, a user can provide a harmful PNG file that results in high CPU utilization and denial of...

8.7CVSS6.7AI score0.00706EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/08/26 6:16 a.m.2 views

CVE-2025-57704 EIP Builder XML External Entity Processing Information Disclosure Vulnerability

Delta Electronics EIP Builder version 1.11 is vulnerable to a File Parsing XML External Entity Processing Information Disclosure Vulnerability...

5.5CVSS7AI score0.00183EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/26 6:16 a.m.23 views

CVE-2025-57704

Delta Electronics EIP Builder v1.11 is affected by a XML External Entity (XXE) processing vulnerability due to improper handling of XML entities during file parsing, causing information disclosure. The issue is described as a local, low-complexity vulnerability with user interaction required, pot...

5.5CVSS6.4AI score0.00183EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/26 6:16 a.m.12 views

CVE-2025-57704 EIP Builder XML External Entity Processing Information Disclosure Vulnerability

Delta Electronics EIP Builder version 1.11 is vulnerable to a File Parsing XML External Entity Processing Information Disclosure Vulnerability...

5.5CVSS0.00183EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-1696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service TPS where it did not properly sanitize Profile IDs, enabling a Stored...

5.4CVSS5.1AI score0.00764EPSS
SaveExploits0References3
Redos
Redos
added 2025/08/26 12:0 a.m.7 views

ROS-20250826-06

Vulnerability of SetQuantumFormat function of ImageMagick console graphic editor is related to incorrect calculation of buffer size when processing received packets. calculation of buffer size when processing received packets. Exploitation of the vulnerability may allow an attacker to cause a...

7.5CVSS7.2AI score0.00548EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/26 12:0 a.m.9 views

PT-2025-34804 · Nvidia · Nvidia Nemo Framework

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo Framework affected versions not specified Description: The NVIDIA NeMo Framework contains an issue in the NLP component that could allow an attacker to inject code through maliciously crafted data. A successful exploit may lead to...

7.8CVSS7.1AI score0.00246EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/08/26 12:0 a.m.6 views

PT-2025-34787 · Jspdf · Jspdf

Name of the Vulnerable Software and Affected Versions: jsPDF versions prior to 3.0.2 Description: jsPDF is a JavaScript library used to generate PDFs. Prior to version 3.0.2, user control over the first argument of the addImage method can lead to high CPU utilization and denial of service...

8.7CVSS7.1AI score0.00706EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/08/26 12:0 a.m.6 views

NVIDIA Nemo Framework 代码注入漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. The NVIDIA Nemo Framework suffers from a code injection vulnerability that stems from malicious data in the NLP component that could lead to code injection, which in turn could lead to code execution...

7.8CVSS7AI score0.00246EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/08/26 12:0 a.m.4 views

The vulnerability of the GNOME graphical interface library libsoup allows a hacker to execute arbitrary code.

The vulnerability of the GNOME graphical interface library libsoup is related to a potential overflow condition during the processing of cookie files. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

3.7CVSS6.4AI score0.00595EPSS
SaveExploits0References10Affected Software9
Snyk
Snyk
added 2025/08/25 3:54 p.m.5 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.1CVSS6.6AI score0.00181EPSS
SaveExploits1References2
Rows per page
Query Builder