CVE-2025-7768 Use of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced

Tigo Energy's Cloud Connect Advanced CCA device contains hard-coded credentials that allow unauthorized users to gain administrative access. This vulnerability enables attackers to escalate privileges and take full control of the device, potentially modifying system settings, disrupting solar...

GHSA-9356-575X-2W9M Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability

A Regular Expression Denial of Service ReDoS vulnerability exists in the Hugging Face Transformers library, specifically in the converttfweightnametoptweightname function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern /^/^// that can be...

CVE-2025-5197

A Regular Expression Denial of Service ReDoS vulnerability exists in the Hugging Face Transformers library, specifically in the converttfweightnametoptweightname function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern /^/^// that can be...

CVE-2025-5197 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability exists in the Hugging Face Transformers library, specifically in the converttfweightnametoptweightname function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern /^/^// that can be...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information or cause service failures...

The vulnerability of the NVIDIA Virtual GPU Manager driver allows a hacker to gain unauthorized access to protected information, increase their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to operations that occur outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause...

The vulnerability of the web page rendering module in WebKit-based operating systems such as iOS, iPadOS, macOS, tvOS, visionOS, watchOS, and the Safari browser allows a perpetrator to trigger a service failure.

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, macOS, tvOS, visionOS, watchOS, and the Safari browser arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iPadOS, VisionOS, iOS, WatchOS, and tvOS allows attackers to trigger a service failure.

The vulnerability of the web page rendering module in WebKit operating systems such as macOS, iPadOS, VisionOS, iOS, WatchOS, and tvOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruption...

GNU GRUB Resource Management Error Vulnerability

GNU GRUB is a Linux system boot program from the GNU community. A resource management error vulnerability exists in GNU GRUB, which originates from a module uninstallation without clearing hooks, and can be exploited by an attacker to initiate a large number of requests, consuming system resource...

PT-2025-32227 · Tigo Energy · Tigo Energy Cca

Name of the Vulnerable Software and Affected Versions: Tigo Energy CCA affected versions not specified Description: The Tigo Energy CCA is susceptible to a command injection issue in the /cgi-bin/mobile api endpoint when the DEVICE PING command is invoked. This allows for remote code execution du...

The vulnerability of the CFNetwork framework in iPadOS and macOS systems, which allows a hacker to trigger a service failure.

The vulnerability of the CFNetwork framework in iPadOS and macOS relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the use of memory after it is freed. This allows attackers to gain unauthorized access to protected information, elevate their privileges, execute arbitrary code, or cause service interruptions.

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the use of memory after it is freed. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, enhance their privileges, execute...

CVE-2025-8109

CVE-2025-8109 is an Imagination Technologies PowerVR-GPU driver vulnerability where an unprivileged process can use ptrace to write to GPU origin read-only memory, potentially causing GPU memory corruption or instability. It is documented with CVSS v3.1 base score 8.8 (High) and requires a patch/...

The vulnerability in the built-in web server boa (/boafrm/formIPv6Addr) of TOTOLINK X15 router software allows a hacker to induce a service failure.

The vulnerability of the built-in web server boa /boafrm/formIPv6Addr of TOTOLINK X15 router software relates to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote attacker to cause service interruption...

The vulnerability of the V8 component of the Node.js software platform, which allows a hacker to trigger a service failure

The vulnerability of the V8 component of the Node.js software platform is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the formSetWAN_Wizard51() function (/goform/formSetWAN_Wizard51) in the D-Link DIR-619L router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formAdvanceSetup function /goform/formAdvanceSetup of the D-Link DIR-619L router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

Vulnerability fixed in SonicWall SonicOS

SonicWall has fixed a vulnerability in SonicOS. The vulnerability is in how SonicOS' SSL VPN interface handles externally controlled formatting strings. This can be exploited by external, unauthenticated attackers, leading to service disruptions. Attackers can exploit this vulnerability to affect...

The vulnerability of the software for providing secure remote access to data through the Palo Alto Networks GlobalProtect App for operating systems on macOS, due to deficiencies in access control, allows a malicious actor to trigger a service failure.

The vulnerability of the software for providing secure remote access to data through the Palo Alto Networks GlobalProtect App for operating systems on macOS is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to cause service interruptions...