Lucene search
+L

4147 matches found

Cvelist
Cvelist
•added 2025/10/07 2:06 p.m.•25 views

CVE-2025-59425 vLLM vulnerable to timing attack at bearer auth

vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...

7.5CVSS0.00566EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/07 2:06 p.m.•2 views

CVE-2025-59425 vLLM vulnerable to timing attack at bearer auth

vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...

7.5CVSS6.5AI score0.00566EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/07 2:06 p.m.•82 views

CVE-2025-59425

CVE-2025-59425 affects vLLM prior to 0.11.0rc2, where API key validation used a string comparison that leaks timing information. Attackers observing responses over many attempts could determine the next correct character in the API key, enabling authentication bypass. The issue is resolved in ver...

7.5CVSS6.5AI score0.00566EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2025/10/07 2:06 p.m.•18 views

CVE-2025-59425 vLLM vulnerable to timing attack at bearer auth

vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...

7.5CVSS6.7AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/10/07 4:33 a.m.•11 views

CVE-2025-59425

A flaw was found in vLLM’s API token authentication logic, where token comparisons were not performed in constant time. This weakness could allow an attacker to exploit timing differences to guess valid tokens and bypass authentication. Mitigation Mitigation for this issue is either not available...

7.5CVSS6.3AI score0.00566EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2020-0062

Malware in sbrugna...

2.4CVSS5.6AI score0.00358EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•8 views

EUVD-2015-5676

Malware in sbrugna...

5CVSS5.8AI score0.07341EPSS
SaveExploits0References12
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2011-2355

Malware in sbrugna...

4.3CVSS9.2AI score0.01423EPSS
SaveExploits2References13
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2012-5493

Malware in sbrugna...

5CVSS6.2AI score0.02102EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2017-1552

Malware in sbrugna...

5.9CVSS5.9AI score0.01565EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2021-0890

Malware in sbrugna...

4CVSS4.1AI score0.0021EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2009-3846

Malware in sbrugna...

5CVSS6AI score0.03168EPSS
SaveExploits1References37
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2013-1658

Malware in sbrugna...

4.3CVSS6.1AI score0.02424EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2014-1581

Malware in sbrugna...

7.5CVSS8AI score0.04002EPSS
SaveExploits3References22
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-0260

Malware in sbrugna...

4.4CVSS5.7AI score0.00896EPSS
SaveExploits0References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2016-10693

Malware in sbrugna...

7.5CVSS7.8AI score0.02718EPSS
SaveExploits0References17
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2016-9065

Malware in sbrugna...

4.3CVSS5.6AI score0.01494EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2016-7921

Malware in sbrugna...

7.5CVSS7.3AI score0.00724EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•7 views

EUVD-2016-7936

Malware in sbrugna...

5.5CVSS6.8AI score0.00594EPSS
SaveExploits0References22
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2016-6175

Malware in sbrugna...

4.3CVSS6.7AI score0.01081EPSS
SaveExploits0References12
Rows per page
Query Builder