CVE-2024-39688

Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the datadir variable is concatenated with other folders and used to open a new file in the generateconfig function, which leads to a limited file write. The issue allows for writing /config/config.json file in arbitra...

The vulnerability of BERT, the language model encoder for NVIDIA NeMo’s complex platform for training and applying neural networks in speech processing and natural language processing, allows a perpetrator to execute arbitrary code, gain unauthorized access to protected information, or replace data.

The vulnerability of BERT, the language model encoder for NVIDIA NeMo’s complex platform used for training and applying neural networks in speech processing and natural language processing, relates to improper code generation management. Exploiting this vulnerability can allow attackers to genera...

Interpretable Ransomware Detection Using Hybrid Large Language Models: A Comparative Analysis of BERT, RoBERTa, and DeBERTa through LIME and SHAP

Ransomware continues to evolve in complexity, making early and explainable detection a critical requirement for modern cybersecurity systems. This study presents a comparative analysis of three Transformer-based Large Language Models LLMs BERT, RoBERTa, and DeBERTa for ransomware detection using...

CVE-2025-33178

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...

EUVD-2025-150152

Malicious code in tadasdhi-ert-bert npm...

Malicious code in tadasdhi-ert-bert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66cd0e05d37ed003692499adb437dbba39fcbc958137c68ce8f387f4da314af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93536

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...

CVE-2025-33178

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...

CVE-2025-33178

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...

CVE-2025-33178

CVE-2025-33178 affects NVIDIA NeMo Framework ( Bert services component). The vulnerability arises from processing of malicious data, enabling code injection which may lead to Code execution, Privilege Escalation, Information disclosure, and Data tampering. NVIDIA’s advisories indicate remediation...

CVE-2025-33178

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...

CVE-2025-33178

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...

EUVD-2025-79723

Malicious code in bert-wallet-store npm...

Malicious code in bert-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc295c0ca6ac9bcceb7ff77c16a3e1fb99b690b33a055f88b6e7ed2b95fc8eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79724

Malicious code in bert-soluble-pot npm...

Malicious code in bert-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d09fb3c2c75ebc8ce22de171e2bff29f5e48d9c072b9a5fa187bc3d57294d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99946 Malicious code in bert-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d09fb3c2c75ebc8ce22de171e2bff29f5e48d9c072b9a5fa187bc3d57294d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99947 Malicious code in bert-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc295c0ca6ac9bcceb7ff77c16a3e1fb99b690b33a055f88b6e7ed2b95fc8eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-33178: Improper Control of Generation of Code

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...

PT-2025-46374

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework affected versions not specified Description The NVIDIA NeMo Framework contains a flaw within the bert services component. An attacker could craft malicious data that leads to code injection. Exploitation of this issue may...