The vulnerability of the __cxl_dpa_to_region() function in the drivers/cxl/core/region.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cxldpatoregion function in the drivers/cxl/core/region.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nfs4_set_security_label() function in the fs/nfs/nfs4proc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nfs4setsecuritylabel function in the fs/nfs/nfs4proc.c module of the Linux kernel is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the send_io_resp_imm() function in the drivers/infiniband/ulp/rtrs/rtrs-srv.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the sendiorespimm function in the drivers/infiniband/ulp/rtrs/rtrs-srv.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ice_reset VF() function in the drivers/net/ethernet/intel/ice/ice VF_lib.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the icereset VF function in the drivers/net/ethernet/intel/ice/ice VFlib.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ks8851_irq() function in the drivers/net/ethernet/micrel/ks8851_common.c module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the ks8851irq function in the drivers/net/ethernet/micrel/ks8851common.c file of the Linux kernel is related to insufficient locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the vfiopciIoctlGetPCIHotResetInfo() function in the drivers/vfio/pci/vfiopciCore.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the vfiopciIoctlGetPCIHotResetInfo function in the drivers/vfio/pci/vfiopciCore.c module of the Linux kernel is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nfsd_net_init() function in the fs/nfsd/nfsctl.c module of the NFS file system in Linux kernels allows a attacker to cause a service failure.

The vulnerability of the nfsdnetinit function in the fs/nfsd/nfsctl.c file of the NFS network file system in Linux kernels is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

GHSA-5CPQ-9538-JM2J Gradio DOS in multipart boundry while uploading the file

A vulnerability in the file upload process of gradio-app/gradio version @gradio/[email protected] allows for a Denial of Service DoS attack. An attacker can append a large number of characters to the end of a multipart boundary, causing the system to continuously process each character and issue...

GHSA-4V9F-R55G-G6HC Prefect CORS (Cross-Origin Resource Sharing) misconfiguration

A CORS Cross-Origin Resource Sharing misconfiguration in prefecthq/prefect prior to version 3.0.3 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruptio...

PYSEC-2025-98

A Server-Side Request Forgery SSRF vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the response in a folder named after the SHA-1 hash of the target URL. This enables the attacker to access th...

CVE-2025-0188

A Server-Side Request Forgery SSRF vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the response in a folder named after the SHA-1 hash of the target URL. This enables the attacker to access th...

CVE-2024-9365

A Cross-Site Request Forgery CSRF vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized actions in the context of the victim's browser. This includes creating projects, model versions, and artifact versions, or changing settings. The impact of this vulnerability...

CVE-2024-8966

A vulnerability in the file upload process of gradio-app/gradio version @gradio/[email protected] allows for a Denial of Service DoS attack. An attacker can append a large number of characters to the end of a multipart boundary, causing the system to continuously process each character and issue...

CVE-2024-8183

A CORS Cross-Origin Resource Sharing misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and...

CVE-2024-8018

A vulnerability in imartinez/privategpt version 0.5.0 allows for a Denial of Service DOS attack. When uploading a file, if an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process these characters, rendering privateGPT inaccessible...

CVE-2024-8183 CORS Misconfiguration in prefecthq/prefect

A CORS Cross-Origin Resource Sharing misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and...

CVE-2024-8183

CVE-2024-8183 affects the Prefect framework (prefect, v2.20.2). The issue is a misconfigured Cross-Origin Resource Sharing (CORS) policy that permits unauthorized domains to access sensitive data, potentially enabling unauthorized access to the database and leading to data leaks, confidentiality ...

CVE-2024-8183 CORS Misconfiguration in prefecthq/prefect

A CORS Cross-Origin Resource Sharing misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and...

CVE-2024-8966

The CVE concerns a DoS in the file upload path of gradio-app/gradio, specifically @gradio/[email protected]. An attacker can append a large number of characters to the end of a multipart boundary, causing the server to process each character and generate warnings, which can render Gradio inaccessible ...

CVE-2024-9365 Cross-Site Request Forgery (CSRF) in polyaxon/polyaxon

A Cross-Site Request Forgery CSRF vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized actions in the context of the victim's browser. This includes creating projects, model versions, and artifact versions, or changing settings. The impact of this vulnerability...