Lucene search
+L

53 matches found

RedhatCVE
RedhatCVE
•added 2026/01/21 6:29 p.m.•30 views

CVE-2025-33233

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

7.8CVSS5.9AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/20 6:16 p.m.•25 views

CVE-2025-33233

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

7.8CVSS0.00237EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/01/20 5:43 p.m.•9 views

CVE-2025-33233

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

7.8CVSS5.9AI score0.00237EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/01/20 5:43 p.m.•40 views

CVE-2025-33233

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

7.8CVSS0.00237EPSS
SaveExploits0References3
CVE
CVE
•added 2026/01/20 5:43 p.m.•40 views

CVE-2025-33233

NVIDIA Merlin Transformers4Rec (all platforms) is affected by CVE-2025-33233. The issue allows code injection due to the underlying vulnerability, with potential impact including code execution, escalation of privileges, information disclosure, and data tampering. The CVSSv3.1 vector is AV:L/AC:L...

7.8CVSS5.9AI score0.00237EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/20 5:43 p.m.•12 views

CVE-2025-33233

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

7.8CVSS5.9AI score0.00237EPSS
SaveExploits0References3
Mend
Mend
•added 2026/01/20 5:43 p.m.•5 views

CVE-2025-33233

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

8.5CVSS5.9AI score0.00237EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/20 12:00 a.m.•21 views

NVIDIA Merlin Transformers4Rec code injection vulnerability

NVIDIA Merlin Transformers4Rec is a software for building serialized and conversational recommender systems from NVIDIA. NVIDIA Merlin Transformers4Rec suffers from a code injection vulnerability that stems from incorrectly filtering input parameters, which can be exploited by a remote attacker t...

7.8CVSS6.6AI score0.00237EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/20 12:00 a.m.•10 views

CVE-2025-33233: Improper Control of Generation of Code

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

7.8CVSS5.9AI score0.00237EPSS
SaveExploits0References1
Nvidia
Nvidia
•added 2026/01/20 12:00 a.m.•33 views

Security Bulletin: NVIDIA Merlin - January 2026

NVIDIA has released an update for Merlin to address a security issue that might lead to the impacts described in this bulletin. To protect your system, clone or update this software to include the following commits: Commit 27ddd49 or later from NVIDIA-Merlin/Transformers4Rec Go to NVIDIA Product...

7.8CVSS5.9AI score0.00237EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/20 12:00 a.m.•27 views

PT-2026-3635

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability where an attacker could cause code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

7.8CVSS5.9AI score0.00237EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 8:47 a.m.•34 views

CVE-2025-23298

NVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability in a python dependency, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

7.8CVSS7.6AI score0.00771EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/15 12:00 a.m.•19 views

NVIDIA Merlin Transformers4Rec Deserialization Vulnerability

NVIDIA Merlin Transformers4Rec is a software for building serialized and conversational recommender systems from NVIDIA. NVIDIA Merlin Transformers4Rec suffers from a deserialization vulnerability that originates from unsafe deserialization processing of serialized data submitted by a user when...

8.8CVSS6AI score0.00658EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/09 6:15 p.m.•18 views

CVE-2025-33213

NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...

8.8CVSS0.00658EPSS
SaveExploits0References3
Mend
Mend
•added 2025/12/09 5:48 p.m.•5 views

CVE-2025-33213

NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...

8.8CVSS6AI score0.00658EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/09 5:48 p.m.•52 views

CVE-2025-33213

CVE-2025-33213 affects NVIDIA Merlin Transformers4Rec for Linux. The Trainer component has a deserialization vulnerability that could enable code execution, denial of service, information disclosure, and data tampering. Public sources corroborate the issue and note an associated CVSS v3.1 base sc...

8.8CVSS6AI score0.00658EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/12/09 5:48 p.m.•51 views

CVE-2025-33213

NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...

8.8CVSS0.00658EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/09 5:48 p.m.•16 views

EUVD-2025-202258

NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...

8.8CVSS6AI score0.00658EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/09 5:48 p.m.•8 views

CVE-2025-33213

NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...

8.8CVSS6AI score0.00658EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•8 views

CVE-2025-33213: Deserialization of Untrusted Data

NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...

8.8CVSS6AI score0.00658EPSS
SaveExploits0References2
Rows per page
Query Builder