MAL-2025-59192 Malicious code in utomo-oblok87-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 621ed6702e2fa0cb1fa96442bce5f03093f38ae007ccf3f80b7bf8138f265974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-lengko38-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a72d85c4f60d24e6f6157bac330b9e612b1692b46b325f99ab5da9f1fd9ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Amazon Linux 2023 : libnvidia (ALAS2023NVIDIA-2025-250)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-250 advisory. NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalatio...

Amazon Linux 2023 : nvidia-modprobe (ALAS2023NVIDIA-2025-244)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-244 advisory. NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalatio...

CVE-2025-33176

NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adjacent network. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and information disclosure...

Important: nvidia-persistenced

Issue Overview: NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. CVE-2025-23280...

Important: nvidia-open

Issue Overview: NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. CVE-2025-23280...

CVE-2025-33176

NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adjacent network. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and information disclosure...

CVE-2025-33176

NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adjacent network. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and information disclosure...

CVE-2025-33176

NVIDIA RunAI for all platforms is affected by a vulnerability allowing improper restriction of adjacent network communication channels. The issue could enable privilege escalation, data tampering, and information disclosure. Public-enriched sources (NVIDIA security bulletin and Red Hat advisory) ...

PT-2025-45038

Name of the Vulnerable Software and Affected Versions NVIDIA RunAI affected versions not specified Description The software contains a flaw that could allow a user to improperly restrict communications channels on a neighboring network. Exploitation of this issue may result in privilege escalatio...

Radiometrics VizAir 安全漏洞

Radiometrics VizAir is a weather monitoring and warning system from Radiometrics, Inc. A security vulnerability exists in Radiometrics VizAir that stems from a publicly accessible configuration file exposing the system's REST API key, which could lead to remote tampering with weather data and...

NVIDIA RunAI 安全漏洞

NVIDIA RunAI is an artificial intelligence software suite from NVIDIA. A security vulnerability exists in NVIDIA RunAI that stems from improperly restricted adjacent network communication channels, which could lead to elevated privileges, data tampering, and information disclosure...

CVE-2025-23352

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

NVIDIA GPU Display Driver October 2025 Security Update

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows, which might allow denial of service, escalation of privileges, data tampering, code execution, or information disclosure. NVIDIA has released updates to mitigate these...

Security Bulletin: CVE-2025-46801 - Pgpool-II Authentication Bypass

Summary Pgpool-II contains an authentication bypass vulnerability that can be exploited under certain conditions. If an attacker exploits the vulnerability they may be able to log in to the system as an arbitrary user, which could allow them to read or tamper with data in the database, and/or...

Security Bulletin: CVE-2025-46801 - Pgpool-II Authentication Bypass

Summary Pgpool-II contains an authentication bypass vulnerability that can be exploited under certain conditions. If an attacker exploits the vulnerability they may be able to log in to the system as an arbitrary user, which could allow them to read or tamper with data in the database, and/or...

EUVD-2025-35725

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

EUVD-2025-35726

NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

CVE-2025-23347

NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...