Lucene search
+L

535 matches found

OSV
OSV
added 2026/03/18 10:16 p.m.10 views

UBUNTU-CVE-2026-32722

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated...

6.1CVSS6AI score0.00302EPSS
SaveExploits2References6
UbuntuCve
UbuntuCve
added 2026/03/18 10:16 p.m.15 views

CVE-2026-32722

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated...

6.1CVSS6.1AI score0.00302EPSS
SaveExploits2References5
Debian CVE
Debian CVE
added 2026/03/18 9:25 p.m.18 views

CVE-2026-32722

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated...

6.1CVSS5.5AI score0.00302EPSS
SaveExploits2
OSV
OSV
added 2026/03/18 9:25 p.m.10 views

CVE-2026-32722 Memray-generated HTML reports vulnerable to Stored XSS via unescaped command-line metadata

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated...

3.6CVSS6AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/18 9:25 p.m.4 views

CVE-2026-32722

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated...

3.6CVSS5.9AI score0.00302EPSS
SaveExploits2References4Affected Software1
OSV
OSV
added 2026/02/26 3:23 p.m.16 views

BIT-PYTORCH-2025-2148 PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption

A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler.callendcallbacksonjitfut of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launch...

7.5CVSS4.9AI score0.00428EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/02/16 7:30 p.m.9 views

CVE-2025-20106

Uncontrolled search path in some software installer for some VTuneTM Profiler software and IntelR oneAPI Base Toolkits before version 2025.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity...

6.7CVSS5.4AI score0.00128EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/11 2:47 p.m.14 views

CVE-2025-61969

Incorrect permission assignment in AMD µProf may allow a local user-privileged attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

7CVSS6AI score0.00131EPSS
SaveExploits0References2
Fedora
Fedora
added 2026/02/11 1:00 a.m.13 views

[SECURITY] Fedora 42 Update: rust-rbspy-0.34.1-4.fc42

Sampling CPU profiler for Ruby...

7.5CVSS5.4AI score0.00443EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.40 views

PT-2026-7596

Name of the Vulnerable Software and Affected Versions AMD µProf affected versions not specified Description A flaw in permission assignment within AMD µProf could allow a local, privileged attacker to escalate their privileges, potentially leading to arbitrary code execution. Recommendations At t...

7CVSS5.7AI score0.00131EPSS
SaveExploits0References4
NVD
NVD
added 2026/02/10 5:16 p.m.10 views

CVE-2025-20106

Uncontrolled search path in some software installer for some VTuneTM Profiler software and IntelR oneAPI Base Toolkits before version 2025.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity...

6.7CVSS0.00128EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/10 4:25 p.m.36 views

CVE-2025-20106

Uncontrolled search path in some software installer for some VTuneTM Profiler software and IntelR oneAPI Base Toolkits before version 2025.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity...

6.7CVSS0.00128EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/10 4:25 p.m.16 views

CVE-2025-20106

The CVE-2025-20106 entry concerns VTune Profiler software and Intel oneAPI Base Toolkit installers. The vulnerability is caused by an Uncontrolled search path in the installer, affecting Ring 3 user applications. It may enable elevation of privilege when an authenticated user with high attack com...

6.7CVSS5.3AI score0.00128EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/10 4:25 p.m.6 views

CVE-2025-20106

Uncontrolled search path in some software installer for some VTuneTM Profiler software and IntelR oneAPI Base Toolkits before version 2025.0. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity...

6.7CVSS5.2AI score0.00128EPSS
SaveExploits0References1
Lenovo
Lenovo
added 2026/02/10 3:04 p.m.14 views

Intel VTune Profiler Software Advisory - Lenovo Support US

No description provided...

5.4AI score
SaveExploits0
Fedora
Fedora
added 2026/02/10 1:34 a.m.9 views

[SECURITY] Fedora 43 Update: rust-rbspy-0.34.1-4.fc43

Sampling CPU profiler for Ruby...

7.5CVSS5.4AI score0.00443EPSS
SaveExploits1
Intel
Intel
added 2026/02/10 12:00 a.m.12 views

VTune™ Profiler Software Advisory

Summary: A potential security vulnerability in some VTune™ Profiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20106 Description: Uncontrolled search path in some software install...

6.7CVSS5.3AI score0.00128EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.12 views

Intel VTune Profiler和Intel oneAPI Toolkits 代码问题漏洞

Intel VTune Profiler and Intel oneAPI Toolkits are products of Intel Corporation, a US company. Intel VTune Profiler is a performance testing tool designed to optimize software. This software can be used for performance testing in IoT embedded applications, media software, Java applications, and...

6.7CVSS5.9AI score0.00128EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.21 views

PT-2026-7284

Name of the Vulnerable Software and Affected Versions VTuneTM Profiler software and IntelR oneAPI Base Toolkits versions prior to 2025.0 Description An uncontrolled search path exists in the software installer for VTuneTM Profiler software and IntelR oneAPI Base Toolkits. This issue, occurring...

6.7CVSS5.3AI score0.00128EPSS
SaveExploits0References3
Amd
Amd
added 2026/02/10 12:00 a.m.13 views

AMD µProf Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2025-61969| Incorrect permission assignment in AMD µProf performance analysis tool-suite may allow a local user-privileged attacker to achieve privilege escalation, potentially resulting in...

7CVSS5.8AI score0.00131EPSS
SaveExploits0
Rows per page
Query Builder